(Virtual Private Network) A private network that is configured within a public network (a carrier's network or the Internet) in order to take advantage of the economies of scale and management facilities of large networks. VPNs are widely used by enterprises to create wide area networks (WANs) that span large geographic areas, to provide site-to-site connections to branch offices and to allow mobile users to dial up their company LANs.
For years, common carriers have built VPNs that appear as a private national or international network to each customer, but, in fact, are sharing the same physical backbone trunks with many customers. VPNs have been built over X.25, Switched 56, frame relay and ATM technologies as well as IP networks. For added security, encryption is often used. See PVC and SVC.
Encrypting data that travels between a remote user and the corporate LAN over the Internet is very popular. It is much more economical than using private, leased lines or making long distance data calls via modem. Today, in fact, many people think that "VPN" and "encrypted connections over the Internet" are synonymous. See computer security and information security.
Internet VPNs
Several protocols are used to provide security over the Internet. For brief transactions at a Web site, SSL is widely used. For extended, secure transmissions, IPsec, L2TP and PPTP are used to provide secure "tunnels" over the Internet. See IPsec, L2TP, PPTP and SSL.
Frame Relay VPNs from Carriers
Carriers offer point-to-point and multipoint VPNs using frame relay. Customer equipment converts packets to frame relay packets. Frame relay VPNs support any network protocol (IP, IPX, SNA, etc.), but adding a location in a multipoint VPN means provisioning virtual circuits from that site to all other sites, which can be costly. See frame relay.
Virtual IP VPNs from Carriers
Carriers offer multipoint networks that accept only IP packets from the customer and run over an IP core. These virtual private routed networks (VPRNs) connect the customer's IP router to the provider's IP router and require some coordination. See MPLS.
Ethernet VPNs from Carriers
Carriers offer services that encapsulate Ethernet frames and deliver them across their network to an Ethernet connection on the other end. A "LAN interconnect" service connects one Ethernet to another. A "transparent LAN" service (TLS) offers multipoint connectivity, typically using frame relay, but has been problematic due to the differences in Ethernet and frame relay architecture. A virtual private LAN service (VPLS) is the latest implementation of a transparent LAN for Ethernet, using an IP and MPLS core to route traffic (see VPLS).
For years, common carriers have built VPNs that appear as a private national or international network to each customer, but, in fact, are sharing the same physical backbone trunks with many customers. VPNs have been built over X.25, Switched 56, frame relay and ATM technologies as well as IP networks. For added security, encryption is often used. See PVC and SVC.
Encrypting data that travels between a remote user and the corporate LAN over the Internet is very popular. It is much more economical than using private, leased lines or making long distance data calls via modem. Today, in fact, many people think that "VPN" and "encrypted connections over the Internet" are synonymous. See computer security and information security.
Internet VPNs
Several protocols are used to provide security over the Internet. For brief transactions at a Web site, SSL is widely used. For extended, secure transmissions, IPsec, L2TP and PPTP are used to provide secure "tunnels" over the Internet. See IPsec, L2TP, PPTP and SSL.
Frame Relay VPNs from Carriers
Carriers offer point-to-point and multipoint VPNs using frame relay. Customer equipment converts packets to frame relay packets. Frame relay VPNs support any network protocol (IP, IPX, SNA, etc.), but adding a location in a multipoint VPN means provisioning virtual circuits from that site to all other sites, which can be costly. See frame relay.
Virtual IP VPNs from Carriers
Carriers offer multipoint networks that accept only IP packets from the customer and run over an IP core. These virtual private routed networks (VPRNs) connect the customer's IP router to the provider's IP router and require some coordination. See MPLS.
Ethernet VPNs from Carriers
Carriers offer services that encapsulate Ethernet frames and deliver them across their network to an Ethernet connection on the other end. A "LAN interconnect" service connects one Ethernet to another. A "transparent LAN" service (TLS) offers multipoint connectivity, typically using frame relay, but has been problematic due to the differences in Ethernet and frame relay architecture. A virtual private LAN service (VPLS) is the latest implementation of a transparent LAN for Ethernet, using an IP and MPLS core to route traffic (see VPLS).
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Apple plugs 25 Mac OS X security vulnerabilities
- Apple has shipped another Mac OS X monster update to fix a total of 25 documented vulnerabilities that could lead to arbitrary code execution attacks. With Security Update 2008-004, Apple fixes code execution flaws in Launch Services, SMB File Server, System Configuration, VPN and WebKit. ...
- Blog posts 2008-06-30
- Is there really a market for an open source router?
- Is there really a market for an open source router?Certainly isAs someone who installed Tomato on an old Linksys router, I think there is a market for this. Myself and others like me have looked on places like Craigslist to find the particular models that the open source firmware will...
- Discussion threads 2008-06-30
- Time to blow up the software industry
- Time to blow up the software industrySoftware is designed for Libraries and Charter or Municiple School systems.Big competition in the Linux vs Windowes Enterprise software her; Unix and Novell for Agencies and Police Departments. The Court House use Proliant-Linux I heard.BBD - old wine in new bottleBBD is just old...
- Discussion threads 2008-06-24
- 90ò0of all statistics can be made to say anything... 50ò0of the time, aka my thoughts on the Verizon report
- 90ò0of all statistics can be made to say anything... 50ò0of the time, aka my thoughts on the Verizon reportHow many breaches from External...sources were facilitated by poor practices of inside sources? Weak passwords, poor surfing habits, poor security implementations, etc. External breaches only occur when an insider allows it to...
- Discussion threads 2008-06-23
- Ahwar VPN (exe)
- Ahwar VPN is a solution to help clients who are facing problems with their Ahwar messenger due to strict firewall setups. It will assist you in during the log on process and during calls if you face network problems. This version is the first release on CNET Download.com.
- Software downloads 2008-06-23
- 90% of all statistics can be made to say anything... 50% of the time, aka my thoughts on the Verizon report
- ** Update 06/23/2008: I realize I didn't do a very good job of talking about what we're reviewing here. This is in response to the statistics gathered by Verizon related to Forensic Analysis of Data Breaches over a four year span. First off, let me...
- Blog posts 2008-06-22
- Verizon FiOS goes 50 Mbps across U.S.: Should I upgrade?
- Verizon on Tuesday said it will roll out 50 megabits per second Mbps broadband service with upload speeds of up to 20 Mbps. Needless, to say this national rollout--the 50 Mbps down 20 Mbps up (50/20) service was tested in select areas--got my attention. I'm a Verizon...
- Blog posts 2008-06-18
- SimonTools CyberGhost VPN (exe)
- The Internet has long since become an interactive means of communication. Everyone writes e-mails, and many are making use of online storage sites, blogging, or sharing their views on Web forums. Fortunately, CyberGhost VPN gives users a way to surf anonymously and keep their private information from the eyes of...
- Software downloads 2008-06-18
- Windows Live FolderShare: unacceptable 3-day outage
- Windows Live FolderShare: unacceptable 3-day outageWhine. Whine. Whine.FolderShare is a free service. It hasn't cost you a dime. Unacceptable outage or not, you can whine to us or move on to another provider that will invariably pull the same stunt.Anyone who lives in their parents house free of...
- Discussion threads 2008-06-16
- Hacking SCADA for terrorism and destruction
- SCADA scares me, and I've seen enough things on the Internet to be desensitized to many things, but attacks against SCADA threaten our national security in a very real and topical way by attacking power grids, water treatment plants, nuclear plants, etc. Hacking networks that SCADA devices reside on and...
- Blog posts 2008-06-12
- Dialup Password Recovery (exe)
- Dialup Password Recovery can help you recover dial-up logins and passwords. When you connect to the Internet via RAS Remote Access Service, VPN Virtual Private Networking, dial-up or other network connecting methods, the operating system will give you the option to store the password.Although the password is constantly stored in...
- Software downloads 2008-06-12
- What's wrong with an exploit being sexy?
- First off, let me start by saying _dietrich has been following our blog for quite some time and is a consistent poster, providing good advice on how to use Linux securely, sometimes as an alternative to Windows technologies. I wouldn't have commented about this in a blog posting, except that...
- Blog posts 2008-06-10
- The CIO ledger: Pondering iPhone plusses and minuses
- Apple launched a blitzkrieg of iPhone moves: You got a 3G iPhone, a cloud computing and storage service and enterprise support. But there are also a few productivity killers in there that would make an IT exec step back. What do you do? To...
- Blog posts 2008-06-10
- Another bug your tools won't find and your WAF won't prevent
- First off, I want to apologize to our readers for not being here as much last week. I had a rough week involving a random ear infection and the loss of an aunt to cancer, so it was not a week where I was very concerned about computer security or...
- Blog posts 2008-06-09
- Apple: 35 percent of Fortune 500 in iPhone beta
- Apple CEO Steve Jobs went a little enterprise in his Worldwide Developer Conference WWDC keynote and put some numbers behind iPhone's traction. As most of the world has known, the iPhone 2.0 software as three parts: Enterprise support, the software development kit SDK and new features. ...
- Blog posts 2008-06-09
- n-Pass4PC (exe)
- Best Password Manager with multiple additional features. Form filler for web-forms and Windows dialogs, passwords generator, encryption of files, folders and disks. Data shredder. Contacts management, VPN & RDC connection management. Keeps data in AES-256bit encrypted database. This version is the first release on CNET Download.com.
- Software downloads 2008-06-09
- n-Pass2Go (exe)
- Best Password Manager with multiple additional features. Form filler for web-forms and Windows dialogs, passwords generator, encryption of files, folders and disks. Exchange encrypted e-mails with addressees. Data shredder. Contacts management, VPN & RDC connection management. Keeps data in AES-256bit encrypted database. True portable version for any removable media (USB...
- Software downloads 2008-06-09
- iPhone 2.0 - Time for some wild speculation!
- iPhone 2.0 - Time for some wild speculation!Compared to Nokia, the iPhone will still be a 'toy' whatever it isntHours Away?Quick observation:Would it be more accurate to say that the announcement is "days" away, not hours? "Hours" makes it sound like the announcement is today Friday, when the keynote...
- Discussion threads 2008-06-06
- Servers need TLC, too, right?
- Servers need TLC, too, right?Open Source AlternativeFor those interested, you will be able to save ALOT of time by using the Open Source project from www.amahi.orgIt automatically setups a server for use in the home likewise it can be used in an office or school environment, and delivers all the...
- Discussion threads 2008-06-03
- SNAA - Securing Networks with ASA Advanced
- Instantly save $400 off the standard course price when you register on TechRepublic or ZDNet! Offer ends August 22, 2008.View Available Dates and LocationsIn this Authorized Cisco course, you will take your knowledge and skills on configuring, maintaining, and operating Cisco ASA 5500 Series Adaptive Security to the...
- Training 2008-06-01
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- ZDNet video: Intel® vPro™ technology and Cost Savings
-
Randy Nystrom, an IT systems engineer at Intel, shows how vPro saves time and money by diagnosing PC problems remotely. (1 of 4 new videos with Intel engineers on ZDNet).
- Watch the video and more at Intel's Power Center >>
- BNET Industries
- Check out BNET's newest resource for managers and executives. Need to do research on your competitors? Don't have time to read every trade pub? BNET Industries is the new source for daily news, insights, and research on 11 major industries and 9,000 public companies.
-
- The technology industry from a different angle
-
- See what's hot in the auto industry
-
- Stay on top of the energy industry
