All right,
now that we went through and talked about some of the minute details of IPsec,
it's time to talk about the uses of it.
We've covered plenty of information with regards to the
services that this protocol suite can provide,
but what implementations are there available?
How does it function in an actual enterprise environment?
We'll cover some of this information and the use cases
of IPsec throughout this module.
Here, we're talking all about using IPsec in many different ways.
We're going to start with a discussion of the two main
types of IPsec uses in enterprises, site-to-site and remote access VPNs.
Then,
we'll go into detail about different implementation options and
talk about some of them so that we can get an understanding of
what organizations are doing today.
After,
we're going to dive into using IPsec over DMVPN again and show
you how to do this for site-to-site VPNs.
We're going to stick with a similar configuration as before,
but I want to show you what it looks like using just AH by itself.
We'll then cover using IPsec on your endpoint to
connect to a VPN server securely.
Finally, we'll go in and cover some of the extras and gotchas about IPsec.
As I stated just now,
site-to-site and remote access VPNs are the two main concepts
that are utilized in environments today.
These two VPN access types have much different use
cases if we're comparing them,
but they both can use IPsec to secure the network connections.
So, site-to-site VPNs are just what they sound like,
VPNs that connect two or more sites together.
In fact, DMVPN,
which is the implementation of this that we're using in this course,
is a type of site-to-site VPN.
We're sending our GRE tunnels over the IPsec connection
to ensure that the traffic is secure.
The remote access VPN is typically deployed on endpoints and
personal devices to be able to access resources.
Sure,
this type of VPN isn't part of the solution that brought us
to studying IPsec in the first place,
but it has a lot of growing use in the industry,
and it's very important to know about.
Organizations terminate these connections for remote workers to dial
in and connect to the organization's resources.
These can be configured within the device operating system
or an application that can be installed on a device to more
easily configure and connect.
Personal VPNs, such as NordVPN and Hotspot Shield, are a type of remote access VPNs in a sense.