Skip to main content

Quick Start

An introduction to Virtual Private Networks (VPNs): how they work, security features and use cases such as site-to-site and remote access VPNs at centron.

Virtual Private Network​

In this section, you will find information on virtual private networks.

What is a Virtual Private Network (VPN)?​

A Virtual Private Network (VPN) provides an encrypted, targeted means of transmitting data over public networks, such as the Internet. To ensure secure operation and data protection, the following must be guaranteed:

  • Authenticity, which is achieved by:
    • Identifying authorised users
    • Verifying that data originates solely from the authorised source
  • Confidentiality (achieved through encryption)
  • Integrity (data cannot be altered by third parties)

Possible applications:

  • Connecting multiple sites. (Site-to-site VPN)
  • Connecting customers or other external organisations to the corporate network. (e.g. external IT service providers)
  • Connecting field staff or home-office users. (End-to-site VPN)

What types are there?​

End-to-Site VPN / Remote Access VPN​

  • Clients are connected to corporate networks.

e.g. external staff working from home or mobile users.

Site-to-Site VPN / LAN-to-LAN VPN / Branch Office VPN​

  • Several local networks are interconnected via a public network to form a virtual network.
  • Virtual: Site-to-Site VPN; physical: dedicated line.

End-to-end VPN / Host-to-host VPN / Remote desktop VPN​

  • A client accesses another client on a remote network.
  • The VPN covers the entire connection between two clients/hosts.
  • VPN software is required on both sides.
  • There is no direct connection; instead, each client connects to a gateway, which links the two connections together.
  • Usually proprietary and commercial software such as TeamViewer and GoToMyPC. (RDP and VNC are for local use only, as they lack encryption)

IPSec​

IPSec is an extension of the Internet Protocol (IP) that incorporates encryption and authentication mechanisms.

  • Connection mode: Tunnel mode.
  • Suitable for gateway-to-gateway scenarios. (Connection between networks via a third (insecure) network)

Security mechanisms:

  • Access control
  • Data integrity
  • Encryption
  • Authentication
  • Cryptographic protection of transmitted data
  • Interoperability
  • Key management
Last updated on