Computer Networking · Advanced level

Advanced level · Module 3: Network Security and Remote Access · Lesson 2 of 4

VPNs

Connect sites and remote users securely over the internet.

In this lesson you will

  • Explain site-to-site and remote-access VPNs
  • Configure a site-to-site VPN in the lab

Key concepts

encryption tunnelssite-to-site VPNremote-access VPNMFA for VPN

The lesson

A VPN creates an encrypted tunnel across the internet. Site-to-site VPNs link office networks; remote-access VPNs connect individual users.

Remote-access VPNs must use MFA, up-to-date software and limited access to only what users need.

Plan addressing so sites do not overlap — overlapping subnets make VPN routing difficult.

Step by step

  1. Plan non-overlapping site subnets.
  2. Configure the site-to-site tunnel.
  3. Test traffic between offices.
  4. Write remote-access requirements.

Practice activity

Configure the site-to-site VPN between head office and a field office.

Expected result: A working tunnel with tested inter-site traffic.

Check your understanding

  1. Why must site subnets not overlap?

    Show answer

    Overlaps make routing across the VPN ambiguous.

  2. What must protect remote-access VPN accounts?

    Show answer

    MFA.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.