Virtual Private Networks (VPNs) are a type of network technology that allows communication between 2 computers or groups of computers via a public channel, usually the internet. A virtual private network introduction requires an examination of the components of the network and how it differs from traditional, hard-wired network systems.
Virtual Private Networks (VPNs) are a type of network technologythat allows communication between 2 computers or groups ofcomputers via a public channel, usually the internet. A virtualprivate network introduction requires an examination of thecomponents of the network and how it differs from traditional,hard-wired network systems.
What is a network? According to Webster's Dictionary, it is "asystem of computers interconnected by telephone wires or othermeans in order to share information." Before the internet,computers in different offices, cities or even countries couldtalk to each other like people could - through telephone wires.
As the needs for businesses to do that grew, telephone linesbecame replaced by higher volume wires, like T3 circuits, butthe concept was the same. For computer A to talk to computer B,there had to be a physical wire connection. For securityreasons, you would want to make sure that only your 2 computersused that line, so you would contract with a vendor to "lease"that circuit.
Now imagine if you have hundreds of computers all across thecountry, all needing to speak to each other and shareinformation. The cost of leasing private circuits to connect allof these computers together would grow with the distance betweencomputers and the number of connections.
But with the advent of the internet, connections no longerneeded to be physical. As long as each computer had access tothe internet, information could be shared across the internet inmuch the same way that it was when the computers were physicallyconnected. This is where the "virtual" part of the term VPNcomes in; a network exists, but it is virtual because theconnections are not hard-wired dedicated, leased lines anymore.
The last component of our virtual private network introductionis privacy. When networks were still run on leased lines, theissue of privacy relied in large part on the commitment of thecircuit provider to keep the integrity of their circuits, andtherefore the client's information.
But with a Virtual Private Network, privacy is achieved byencryption. When information leaves a computer on the network,it is encrypted in a certain protocol, or code. It is then sentin a private "tunnel" or pathway across the internet to therecipient computer, where it is decoded and received. No one canread the data while it is transmitting, or make any changes toit without it being rejected by the recipient, so the data issecure.
In order to create a VPN, you would need to decide who needs toshare information, in what directions, and how often. Next youwould need to prepare a listing of the hardware and softwaresystems you are currently using at each location. You might needto make changes so that the computers can talk to each othereasily.
You'll also want to consider just how important it is that yourdata remains secure. Now that you've reviewed this virtualprivate network introductionFree Web Content, you should move on to consideringthings such as what type of protocol you'll need and whichvendor(s) you'd like to work with.
Source: Free Articles from ArticlesFactory.com
ABOUT THE AUTHOR
Van Theodorou will help you slash your telecom expenses over 43% and assist or even become your telecom department at no cost to you. For a free analysis or phone consultation go his site for T1 long distance service
Written by: Van Theodorou
Read More...
Sunday, August 23, 2009
Introduction To (VPN) Virtual Private Network
Thursday, July 17, 2008
Overview Juniper M series
Juniper Networks M-series multi-service edge routing portfolio uniquely combines best-in-class IP/MPLS capabilities with unmatched reliability, stability, security and service richness. These multi-service edge routing platforms allow providers to consolidate multiple networks into a single IP/MPLS infrastructure while simultaneously generating new revenues with leading-edge services. M-series multi-service edge routing systems use a hardware-based approach combined with the highly scalable, secure and reliable JUNOS™ software, which enables multiple services without compromise on a single IP/MPLS platform. Providers enjoy maximized revenue and minimized operational and capital costs.
Deployed predominantly at the service-provider edge and in high-end, high-performance enterprise applications, the IP/MPLS M-series multi-service edge routing family is capable of supporting current and emerging Layer 2 and Layer 3 services.
From a Layer 2 perspective, the J-FASE (Juniper Frame and ATM Service Emulation) toolkit, combined with M-series multi-service edge routing performance, enable accurate emulation of ATM and Frame Relay services over MPLS. The same multi-service edge routing platform supports rich Ethernet services, enabling providers to capture revenue from this emerging service. Layer 2.5 Interworking VPNs are available to smoothly migrate customers from ATM/FR to Ethernet services as demand dictates. The same IP/MPLS M-series multi-service edge routing platform also delivers rich Layer 3 services, including the industry's most scalable and comprehensive Layer 3 VPN portfolio, granular per logical interface QoS, hardware-based IPv6, multicast, NAT, stateful firewall and IPSec encryption. New revenues are generated faster and more cost effectively with the scalable policy control of the SDX-300 service deployment system leveraging these rich features.
The M-series multi-service edge routing platform is the one to choose for next-generation consolidated infrastructures:
- Rich packet processing, supporting any Layer 2 or Layer 3 services to any customer on a single platform
- Services scaled with proven stability in the world's largest networks
- Low operational costs and consistent services, with a single JUNOS image across all platforms
- Rapid time to revenue with the policy control of SDX
Thursday, June 26, 2008
Metro Ethernet
A Metro Ethernet is a computer network based on the Ethernet standard and which covers a metropolitan area. It is commonly used as a metropolitan access network to connect subscribers and businesses to a Wide Area Network, such as the Internet. Large businesses can also use Metro Ethernet to connect branch offices to their Intranet.
Ethernet has been a well known technology for decades. An Ethernet interface is much less expensive than a SDH or PDH interface of the same bandwidth. Ethernet also supports high bandwidths with fine granularity, which is not available with traditional SDH connections. Another distinct advantage of an Ethernet-based access network is that it can be easily connected to the customer network, due to the prevalent use of Ethernet in corporate and, more recently, residential networks. Therefore, bringing Ethernet in to the Metropolitan Area Network (MAN) introduces a lot of advantages to both the service provider and the customer (corporate and residential).
A typical service provider Metro Ethernet network is a collection of Layer 2 or 3 switches or routers connected through optical fiber. The topology could be a ring, hub-and-spoke (star), full mesh or partial mesh. The network will also have a hierarchy: core, distribution and access. The core in most cases is an existing IP/MPLS backbone, but may migrate to newer forms of Ethernet Transport in the form of 10G or 100G speeds.
Ethernet on the MAN can be used as pure Ethernet, Ethernet over SDH, Ethernet over MPLS or Ethernet over DWDM. Pure Ethernet-based deployments are cheap but less reliable and scalable, and thus are usually limited to small scale or experimental deployments. SDH-based deployments are useful when there is an existing SDH infrastructure already in place, its main shortcoming being the loss of flexibility in bandwidth management due to the rigid hierarchy imposed by the SDH network. MPLS based deployments are costly but highly reliable and scalable, and are typically used by large service providers.
source: http://en.wikipedia.org/wiki/Metro_Ethernet
Monday, May 12, 2008
Leverage Used Cisco Equipment to Minimize Downtime
Article Directory: http://www.articlecube.com Lauren L. Stevens is a professional writer specializing in computer networking technology. She often recommends her clients select a used cisco router or other refurbished routers and switches instead of paying full price for new computer networking equipment.
Network supervisors are turning to the secondary equipment market for used Cisco gear as an extra measure of protection from disasters and downtime. The difficult task of delivering uninterrupted access to company networks with fully-redundant Cisco equipment configurations has proven outside the grasp of budget-constrained IT departments.
As a result many companies have resorted to protecting only Cisco routers and switches at the network core, leaving the edge and remote offices vulnerable in the event of a major disaster or mundane outage. The risks far outweigh the rewards in this scenario as a simple equipment failure at a remote site can cause a devastating ripple effect throughout the entire organization.
In an effort to improve company-wide preparedness for disasters of any kind, growing numbers of organizations are embracing more cost-effective refurbished Cisco equipment sourcing and flexible sparing solutions. It pays to have a backup plan for computer networking equipment procurement and today's secondary market providers offer a variety of used networking equipment options for helping companies safeguard their networks.
Since refurbished gear typically offers savings of up to 90 percent off list prices, companies seeking a fully-redundant configuration can more affordably deploy a one-for-one sparing solution. An even more cost-effective alternative is a one-for-many strategy, acquiring a spare router or switch for every three to five identical network elements.
Off-site spares depots are particularly appealing to firms with multiple locations that don't have sufficient space or an ideal central site for storing replacement equipment. Providers of used computer networking equipment often offer warehousing options to expedite equipment availability and shipment. Similar rapid replacement warranties offered by OEMs often cost many times the value of the covered equipment.
Another reason for maintaining a supply of refurbished spares is that it lets companies quickly apply a temporary fix for unexpected problems. The secondary market's ability to provide a wide range of refurbished Cisco equipment with expedited shipping helps maintain maximum uptime. In contrast most OEMs typically need at least four to six weeks to deliver new gear.
When the network is up-and-running again, the interim solution can be re-deployed for testing and/or personnel training. Using spare Cisco switches and routers in this fashion permits these tasks to be performed during regular business hours without placing negative impact on the primary network.
Thursday, May 1, 2008
Cisco CCNP Certification Training Tutorial: The New 642-825 ISCW CCNP Exam by Chris Bryant, CCIE #12933
The key word in this Cisco exam is "secure". Very few of the BCRAN topics are moving to the ISCW exam, and an emphasis is being placed on VPNs and network security configurations and methods. According to Cisco's exam blueprint, the only BCRAN topics you can expect to possibly see on the ISCW exam are PPPoE and PPPoA. The importance of network security has never been higher, and it's to Cisco's credit that their new CCNP exams are emphasizing security.
Other new topics on this exam include Frame-Mode MPLS, the configuration and verification of Cisco IOS firewalls, and the Cisco IOS IPS. Successful CCNP candidates will also be able to describe and defend against network intrusions and attacks by everything from Trojan Horses to Denial of Service (DOS) attacks. The access-list knowledge you picked up during your CCNA exam studies will come in handy on the ISCW exam as well, since ACLs are a form of network security.
VPNs are just about as common in today's networks as cable, and all well-rounded network admins must know about the many different forms of attacks their networks can suffer, as well as how to defend against those attacks. The knowledge you acquire while studying for the ISCW exam will be immediately applicable in any network environment. This new CCNP certification exam is a tremendous step forward for Cisco certifications, and this already valuable certification is only going to become more valuable -- and tougher to get!
About the Author
Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free Cisco CCNA certification and CCNP tutorials! For my FREE "How To Pass The CCNA" course, visit the website! Attend a CCNA boot camp from The Bryant Advantage!
Read More...MPLS - is it the future of communications for businesses? by Alain Nguyen
There are lots of products that have the label MPLS, so one needs to be careful of the types of services available. There are several partial implementations (Cisco included) of the MPLS specifications, many of which do not give the full range of QoS and support for carrying diverse services at the same time. For multi-service networks MPLS services provided by the major providers is most likely the best options to consider.
MPLS service is the 'Now' (not the future) Generation of backbone technology. It is the number one service offering for most Global Telco's, not to mention the main focus of Vendors in the US. In Europe and Asia, it is already the technology of choice for most new WAN implementations.
It is always safer to compare the business cases for MPLS and competing legacy technologies when considering a change. Often the Service Providers push customers into MPLS solutions because it is fashionable and the margins are better for them as they can bundle multiple services with it (Data and VOIP plus enhanced network monitoring tools etc). The overall MPLS costs for a customer will depend on several factors:
(a) existing and future bandwidth requirements; (b) the need to use bandwidth on demand; (c) geographical spread of wide area networks (distance from the exchange and regulatory restrictions). The further the locations, the more advantageous it is to have MPLS connections since they're distant insensitive.
MPLS network is truly becoming the technology for today's WAN. With the refresh of network infrastructure now better built into operating budgets, the fact that VOIP, videoconferencing and convergence of legacy and current data networks are no longer a leap of faith, more and more businesses migrating to MPLS solutions in the next year and beyond.
Every major bandwidth provider in the US is pushing MPLS. In fact, Sprint, a major Tier 1 provider, is abandoning the frame relay service at the end of the year and getting everyone on their MPLS network.
In order to take full advantage of the MPLS technology, MPLS service is required at every site. ALL MPLS offerings allow businesses that previously did not have a full meshed network to now have the benefits of one. This plays well into most Disaster Recovery plans too. All locations can interact with one another without additional cost like frame relay .
MPLS service includes CoS (class of service). This is very useful if you have VOIP or run applications such as videoconferencing, ERP, CRM, etc.
For MPLS connections to be most effective, your entire route from point A to point B has to be MPLS enabled. So given locations A say in Los Angeles and location B in say Chicago, this entire path from both locations HAVE to be MPLS enabled. Otherwise, the packet markings are useless.
Shopforbandwidth.com has helped numerous companies migrate from frame relay or VPN to MPLS. They can do the same for your company as well. You can choose to connect your various locations with MPLS speeds usually starting at 1.5 mbps to 45 mbps (T1 speed to T3/DS3 bandwidth) and faster.
For MPLS pricing, get MPLS quotes NOW at http://www.shopforbandwidth.com/bandwidth-services.php!
About the Author
Alan Nguyen has been involved in the Telecom/Bandwidth industry for over seven years. Through his company, they have represented all the major Tier 1 providers such as AT&T, MCI/Verizon, Sprint, Qwest, Savvis, etc. He has helped hundreds of small to midsize businesses get bandwidth services such as T1, T3/DS3, OC3, VPN/MPLS, etc.
Read More...Networking (Computers) by Christoff Genviere
The first mathematical question in setting up a network is very basic. How many computers will be connected to this network and how many guest computers might come on at one time is the question. An example of a guest computer is if someone brought a laptop and connected it for a short while to download or access data. To find the answer to the question, simply count the desktop computers that will be connected and how many guest computers you expect to be connected at one time.
The second mathematical problem that occurs is best solved using an algebraic equation. Let x=the amount of desktop computers that will always be connected, y=the amount of guest computers that you expect to be connected at one time. So, the equation is: x+y+1. The one added on the end of the equation is another guest file just to make sure you don't fall short. So, this tells you how many files you need to create. The guest files will all be generically named so that all guests have the same access privileges, and all the permanent computers will have their own named file so they can have more personalized access privileges. These files are put on one main computer, the server. This controls all access privileges and any data put into a computer branching off from it in it's network can be accessed from this all-powerful server computer. The previously stated problems are a large part of networking, although I couldn't possibly tell about all the math involved without going on for another 3 or 4 pages. Those problems help with networking as far as setting up the network on the computer goes, but there is a whole nother side. The physical side.
The physical side of computer networking involves problems such as how many feet of cable are you going to need to connect the computers. Some large office buildings can have 1 mile of cable between their networked computers! If someone has 2 computers in their house, it may only involve 3 feet. The mathematical procedure is quite simple although it might take a while to complete. Just take out the old meter stick and start measuring. Don't measure direct lines between the computers unless you want the cable stretching in a straight line between them. Chances are you will want it to run along a wall or around another object. Once the measuring is done, just add up the cable length and you have the answer to the problem.
If you don't have a very tight budget, you can afford faster networks than cable networks. These are more sophisticated but I was lucky enough to get to try it this summer. It is called infrared data transfer (IDT). Instead of cables, you have an infrared connector hooked to your computer. Just aim the little infrared panel at the infrared panel on the other computer and it will trade information with infrared light. These panels are usually about 1 square inch in size. This is much quicker and doesn't involve annoying cables. You still need to gauge distance because there is a distance limit on how far apart they can be and still work. When you install them, your computer will ask you questions such as how many lumens (measurement of brightness of light) you would like your panel to emit. It is invisible to the naked eye but the amount of lumens it outputs is critical. If you have a fast computer, you might want more lumens so that your computer doesn't crash because of lagging. If you have a slower computer you will want less lumens because other wise you will be sending data too fast for your computer and there will end up being a lot of gibberish that will mess up the receiving computer.
About the Author
Christoff Genviere is the author of free essays and papers found at Dreamessays.com. He mainly writes Great Gatsby book reports and American literature reports and essays. Christoff is a professional writ