This course is a deep dive into the world of VPNs. The class is split into two portions, the first covers the basics of Cryptography. This serves as a review of the basic building blocks of a VPN and how each individual part works together to achieve the goal of secured communication. The second part of the class offers an in-depth look at the VPN Negotiation process, and what two peers must agree upon before a VPN tunnel will successfully build.

This is an advanced level class intended for students who can build VPNs without any assistance, and who have started troubleshooting VPNs using the available VPN Debugging.

By the end of class, the student will be able to:

• Speak confidently about each of the Security services and how they are provided in a VPN tunnel
• Explain the concept of Confidentiality and how it is provided
• Explain the concept of Integrity and how it is provided
• Explain the concept of Authenticity and how it is provided
• Explain the concept of Anti-Replay and how it is provided
• Understand the uses of the Diffie-Hellman Key Exchange
• Describe and Contrast the two protocols that provide IP Security
• Understand the two Modes to deploy IPsec and how they differently modify the original packet
• Describe ISAKMP and its various functions
• Describe a Security Association and its contents
• Explain the function of the Internet Key Exchange (IKE) in the overall VPN negotiation process
• Illustrate the 6 messages in Main Mode
• Illustrate the 3 messages in Aggressive Mode
• Illustrate the 3 messages in Quick Mode
• Explain the Lifetime and how the Rekey process works
• Understand PFS and what it does
• Understand NAT Traversal and what it does

Networking Training Audience