VPNs Explained - How to Create a AWS Site-To-Site VPN?

Рет қаралды 128

Күн бұрын

In this video, we will cover how to configure Site-to-Site VPNs. This is one of the most complicated configurations in all of security appliance configurations. Between IPSec protocols, Phase 1 and Phase 2 tunneling, encryption, hashing, and authentication options, it can be overwhelming. What you’ll learn here will simplify the process substantially.
Join WhatsApp: www.whatsapp.com/channel/0029...
👉Get CloudWays ➜ www.cloudways.com/en/?id=1365224
💥CloudWays COUPON CODE: CLOUDGURU25
☝️☝️ USE THE EXCLUSIVE COUPON CODE ABOVE TO GET 25% OFF FOR 3 MONTHS💥
👉Get Digital Ocean ➜ digitalocean.pxf.io/ZQERvQ
💥Get $200 FREE Credits for signup. So, hurry up!💥
╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗
║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣
╠╗║╚╝║║╠╗║╚╣║║║║║═╣
╚═╩══╩═╩═╩═╩╝╚╩═╩═╝
Timestamps:
0:00 Introduction
1:34 Update Our Route Tables
3:12 Launch an EC2 Instance
7:19 Create a Virtual Private Gateway
7:43 Site to Site VPN Connections
8:48 Enable Route Propagation
9:19 Download the Configuration
9:43 Ipsec Tunnel 1
12:34 Edit the Secrets File
16:57 Two-way Routing
Site-to-site VPNs are incredibly flexible because there are so many ways to customize what you’re doing. Unfortunately, for the same reason, they can be incredibly confusing. Knox begins by identifying his subnets and the branch site he’s targeting for the other side of the VPN.
We’ll discuss the theory behind secure tunneling, explain how difficult establishing these secure tunnels is when it’s done manually, and then demonstrate how easy it is to do with Meraki. You’ll watch as he initiates a site-to-site VPN connection, then walks through each step of the process and explains what he is doing in this short video.
VPN Stands for Virtual Private network. Its job is to ensure the safe delivery of data across public networks. By doing this, it allows users to send data as if they were connected directly to the private network.
Private WAN technology is available however they come at a price. Internet VPNs however only require a very affordable internet connection.
A VPN is often described as a tunnel. Your data is encrypted before it passes through the public internet. This way, if one of the bad guys does get their hands on your data, they can't make any sense of it. Once your data is received, it is then decrypted using a special key so it can be read.
There are two main types of VPN.
A site-to-site VPN connects two or more sites together. It needs to be configured on both networks, so it's ideal in situations when you have multiple remote sites.
But you may also have individual users that work from home, coffee shops or anywhere else in the world. These users still require access to the corporate network, but a site-to-site VPN won't work because you have no control over the networks they are connecting from.
Instead, they can use a remote access VPN. A remote-access VPN grants access to the corporate network but only for one device, for example, a users laptop in a coffee shop. This is unlike the site-to-site VPNs which connects two entire networks.
When configuring remote access VPNs, you need to decide if you want to use a 'full tunnel' or a 'split tunnel'. A full tunnel means that once connected to the VPN, all network traffic from this host will be forwarded to the corporate network. A split tunnel means only traffic destined for the corporate office is sent over the VPN. All other traffic is routed as normal.
IPSec is a framework or set of rules for creating VPNs over a network.
It does not define one way to create a VPN, but rather allows several protocols to be used for each VPN feature. IPSec is often used for site-to-site VPNs but it can also be used for remote access.
#sitetositevpn #vpn #cloudguru

Пікірлер: 3

@CloudGurus Ай бұрын

Join WhatsApp: www.whatsapp.com/channel/0029Va8fH154IBhEu3t21y2o 👉Get CloudWays ➜ www.cloudways.com/en/?id=1365224 💥CloudWays COUPON CODE: CLOUDGURU25 ☝☝ USE THE EXCLUSIVE COUPON CODE ABOVE TO GET 25% OFF FOR 3 MONTHS💥 👉Get Digital Ocean ➜ digitalocean.pxf.io/ZQERvQ 💥Get $200 FREE Credits for signup. So, hurry up!💥 ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝