background image
Virtual Private Networks (VPNs) 577
Figure 15-17
VPN
The sites shown in Figure 15-17 are separated by thousands of miles. Leased lines between the
sites would be expensive, and Frame Relay might not be available in this area. The solution is
to purchase a VPN service from a provider. In this example, all traffic between sites is encrypted
for confidentiality. This is accomplished through the use of tunneling, of which there are three
main types: L2F, L2TP, and IPSec. The figure shows three different VPNs. The SOHO user is
accessing corporate resources (e-mail and servers) from the Internet. There is LAN-to-LAN or
remote-site connectivity through the Internet. And a remote site is performing some extranet
activity with one of its successful partners.
TIP
To determine how much money you can save your customer with your CCDP VPN design,
access the VPN calculator at http://www.cisco.com/warp/public/779/largeent/learn/
technologies/vpn/vpn_calc/vpnstart.html.
L2F
Cisco's own proprietary implementation is called Layer 2 Forwarding, or L2F. The L2F
protocol focuses on providing a tunneling mechanism for transporting link-layer frames (for
example, HDLC, PPP, SLIP) of higher-layer protocols. Using such tunnels, it is possible to
separate the location of the initial dialup to the local ISP from the location at which the dialup
protocol connection is terminated and the location at which access to the network is provided
(usually a corporate gateway).
Corporate remote site
Cisco
Corporate remote site
Corporate HQ
SOHO
Internet
Up to thousands of miles
between host sites
87200333.book Page 577 Wednesday, August 22, 2001 1:41 PM