28
Virtual Private Network (VPN) Sample_OneNote Page 1

Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

  • Upload
    others

  • View
    12

  • Download
    1

Embed Size (px)

Citation preview

Page 1: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Virtual Private Network (VPN)

Sample_OneNote Page 1

Page 2: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Why Virtual Private Network (VPN)?

Sample_OneNote Page 2

Page 3: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

The General Idea: Using "Proxy"

Sample_OneNote Page 3

Page 4: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Proxy at the Transport LayerSSH Tunneling

Sample_OneNote Page 4

Page 5: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Proxy at the IP LayerIP Tunneling

Sample_OneNote Page 5

Page 6: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

IP Tunneling: IPSec Approach

Sample_OneNote Page 6

Page 7: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

IP Tunneling: SSL/TLS Approach

Sample_OneNote Page 7

Page 8: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Review: Tunneling

Sample_OneNote Page 8

Page 9: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Virtual Networking Technologies

Sample_OneNote Page 9

Page 10: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

The TUN/TAP Interface

Sample_OneNote Page 10

Page 11: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Packet Tunneling

Sample_OneNote Page 11

Page 12: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

How VPN Works: Outgoing Traffic

Sample_OneNote Page 12

Page 13: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Creating TUN/TAP Interface

Creating a TUN Interface

Show the TUN Interface

Set the IP Address for the TUN Interface

Bring Up the TUN Interface

Sample_OneNote Page 13

Page 14: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Network Configuration

Sample_OneNote Page 14

Page 15: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Read from the TUN Interface (ping 192.168.60.5)

Read From the TUN Interface

Sample_OneNote Page 15

Page 16: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Create a Packet

Write to the TUN Interface

Write to the TUN interface

# cat icmp.bin >& 3

Sample_OneNote Page 16

Page 17: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Question: Network Setup

Question: Where should we run the following commands?

A: $ sudo route add -net 10.4.2.0/24 gw 192.168.60.5 eth19

B: $ sudo route add -net 10.4.2.0/24 tun0

C: $ sudo route add -net 192.168.60.0/24 tun0

Sample_OneNote Page 17

Page 18: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Testing VPN

Sample_OneNote Page 18

Page 19: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Case Study: SURA (Syracuse University VPN)

Sample_OneNote Page 19

Page 20: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

SURA: Before Running VPN

Interfaces

Routing table (Windows: Route PRINT)

Sample_OneNote Page 20

Page 21: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

SURA: After Running VPN

Interfaces

Routing table

Sample_OneNote Page 21

Page 22: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Question: Find the IP Addresses

What is my computer’s real IP address (i.e., the IP address of my WiFi card)?1.

What is the IP address of the VPN server? 2.What is the IP address of my TUN interface? 3.

SU's VPN is called SURA. If you run SURA on your computer, once you have logged in, a VPN tunnel will be established between your host machine and SU's network (128.230.0.0/16). After I run SURA, the routing table on my computer appears as in the picture below. Please answer the following questions.

Sample_OneNote Page 22

Page 23: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Lab Setup

Manually set up the IP address for the "Internal Network" adaptor on VPN Server

Sample_OneNote Page 23

Page 24: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Creating a VPN Tunnel using TUN/TAP

Sample_OneNote Page 24

Page 25: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Packet Flow

Sample_OneNote Page 25

Page 26: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Encrypting the Tunnel

Packet Flow

Sample_OneNote Page 26

Page 27: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

Bypassing Firewalls: Another Popular Use of VPN

Internet

Sample_OneNote Page 27

Page 28: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote

A Related Lab: Bypassing Firewalls using VPN

Sample_OneNote Page 28