network engineering
zhangziwen
VPNArchitectureHWinstruction.ppt*
Possible VPN Deployement
*
*
Possible VPN Deployement
*
*
VPNs and Firewall - Filtering Example
*
*
VPNs and Firewall - Filtering Example
*
*
VPNs and Firewall - Filtering Example
- Development of filtering rules
- Well you guest it!!! Another little extra homework!
- Functional requirements:
- All users can browse the web
- All internet users should be able to access the public web server.
- All ip traffic between main site and remote site must be allowed… but must be using a VPN tunnel!
- Optional: Remote commuters access all internal resources via VPN concentrator at corporate site
- You must deliver in class/D2L hardcopies of:
- NAT/PAT spreadsheet
- Firewall rules spreadsheet
- Static routing spreadsheet
- Security Policy database XLS for both VPN concentrators
*
Firewall A
Internet
Router
Internet Outside
Zone
Firewall B
Internal Network
"DMZ"
Inside Services
VPN Concentrator
SOLUTION A:
Parallel to Front Firewall
Internet
Internal Network
Inside Services
Firewall A
Router
Internet Outside
Zone
Firewall B
"DMZ"
VPN Concentrator
SOLUTION B:
Parallel to Back Firewall
Firewall A
Internet
Router
Internet Outside
Zone
Firewall B
Corporate Network
10.1.1.0/24
"DMZ"
Inside Services
VPN Concentrator
Firewall C
Router
Internet Outside
Zone
Firewall D
"DMZ"
VPN Concentrator
Remote Office Network
10.1.2.0/24
Telecommuter
No fixed IP
140.192.1.1
140.192.1.2
140.192.2.1
140.192.2.2140.192.2.3140.192.22.2
140.192.22.3
140.192.22.1
140.192.12.2
140.192.12.1
10.1.1.1
10.1.2.1
10.2.1.1
10.2.1.2
10.22.1.1
10.22.1.2
Public Web
10.1.1.20
Firewall AInternetRouterInternet OutsideZoneFirewall BCorporate Network10.1.1.0/24"DMZ"Inside ServicesVPN ConcentratorFirewall CRouterInternet OutsideZoneFirewall D"DMZ"VPN ConcentratorRemote Office Network10.1.2.0/24TelecommuterNo fixed IP140.192.1.1140.192.1.2140.192.2.1140.192.2.2140.192.2.3140.192.22.2140.192.22.3140.192.22.1140.192.12.2140.192.12.110.1.1.110.1.2.110.2.1.110.2.1.210.22.1.110.22.1.2VPN Tunnel
