And: Deploy Ipsec // VPN System on Windows Server 2003

This updated guide examines And: Deploy Ipsec // VPN System on Windows Server 2003 and organizes the essential facts, background, and practical takeaways in clear American English.

In this model, we use an external client machine running Windows XP operating system, VPN connection with IPSec ESP-based authentication and data encryption mechanism. Here I only present the main steps in the deployment process, details of installation and configuration you can refer to video files (.avi) downloaded at the website www.pcworld.com.vn . Step 1: Create the controler domain ( dcpromo-srv-11-greenlizardbooks-domain-controller.avi )

Step 2: Insert the SRV-1 (VPN Server) into the domain ( join_srv-1_server_to_domain.avi )

Step 3: Install VPN Server on SRV-1 ( install_vpn_server_on_srv-1.avi )

Step 4: Set up a VPN Client Client-1 to connect to the VPN Server ( create_vpn_client_1_and_connect_to_srv-1_vpn_server.avi )

Step 5: Connect the VPN Client Client-1 to the domain ( join-vpn-client-1-to-greenlizardbooks_domain.avi ) Step 6: Request for issuing electronic certificate (certificate) for VPN Server and Client for authentication and encryption. ( request_certificate_for_vpn_server_and_client.avi )

Step 7: Set up a VPN connection using L2TP / IPSEC protocol ( establish_L2TP_VPN_connection.avi )

CONCLUDE VPN is the most commonly used technology to provide a safe and effective connection to access internal corporate resources from outside the Internet. Although we use shared network infrastructure, we still guarantee the privacy of data as if it were communicating on a private network. The "soft" VPN solution introduced in this article is suitable for a small number of users, to meet a larger number of users, a hardware VPN solution may be required.

TUNNELING

Tunneling is a technique that uses an intermediate network (usually the Internet) to transfer data from this computer network to another computer network but still maintain privacy and data integrity. Data transmitted after being split into frames or packets (packets) according to the communication protocols will be wrapped with a header layer containing routing information to enable packets to be transmitted through intermediate network systems according to separate roads (tunnel). When the packet is transmitted to the destination, they are separated from the header layer and transferred to the final workstation that needs to receive data. to establish tunnel connection, the client and server machines must use the same tunnel protocol. - PPTP ( Point-to-Point Tunneling Protocol ): PPTP can be used for Remote Access or Site-to-Site VPN. The advantage of using PPTP for VPN is that it does not require a certificate for authentication and the client can put behind the NAT Router. - L2TP ( Layer 2 Tunneling Protocol ): L2TP is a combination of PPTP and Layer 2 Forwading (L2F, the protocol developed by Cisco System). Compared to PPTP, L2TP has more powerful and safe features. On Microsoft systems, L2TP is combined with IPSec Encapsulating Security Payload (ESP) for data encryption, called L2TP / IPSec. This combination not only allows authentication for PPTP users, but also allows authentication for computers through certificates, improving the security of data transmission, and tunneling can takes place on many different network systems. However, in the L2TP / IPSec environment the VPN Client cannot be placed behind the NAT Router. In this case we need to have a VPN Server and VPN Client that supports IPSec NAT-T.

Nguyen Tran Tuong Vinh MCSA / MCSE Security, Comptia SECURITY +, SCNP Leader@Security365. Org Director - SECURE SOLUTION