Virtual Private Networks: Technologies and Solutions
Ruixi Yuan, W. Timothy Strayer
- 出版商: Addison Wesley
- 出版日期: 2001-05-04
- 售價: $2,190
- 貴賓價: 9.5 折 $2,081
- 語言: 英文
- 頁數: 336
- 裝訂: Paperback
- ISBN: 0201702096
- ISBN-13: 9780201702095
無法訂購
買這商品的人也買了...
-
$680$537 -
$2,610$2,480 -
$1,710$1,625 -
$620$608 -
$480$408 -
$560$504 -
$450$351 -
$2,340$2,223 -
$1,860$1,767 -
$550$435 -
$580$458 -
$650$553 -
$580$458 -
$760$600 -
$580$458 -
$590$466 -
$199$179 -
$680$537 -
$690$538 -
$720$562 -
$720$569 -
$560$442 -
$750$675 -
$480$379 -
$750$593
相關主題
商品描述
Description
Computer Security/Cryptography.
Features
Table Of Contents
Preface.I. VPN FUNDAMENTALS.
1. Introduction. Business Communication.
VPN Motivation.
The VPN Market.
VPN Technologies.
VPN Solutions.
VPN Motivation.
The VPN Market.
VPN Technologies.
VPN Solutions.
2. Basic Concepts.
A Brief History of the Internet.
Network Architecture.
Network Topology.
The Need for Security.
Cryptography.
Network Architecture.
ISO OSI Reference Model.
IP.
IP.
Network Topology.
The Need for Security.
Cryptography.
Shared Key Cryptography.
Public Key Cryptography.
Digital Signatures.
Message Authentication Codes.
Public Key Cryptography.
Digital Signatures.
Message Authentication Codes.
3. VPN Architectures.
Site-to-Site Intranet VPNs.
Remote Access VPNs.
Extranet VPNs.
A Security Services Taxonomy.
Remote Access VPNs.
Extranet VPNs.
A Security Services Taxonomy.
II. VPN TECHNOLOGIES.
4. Tunnels.
Tunneling.
Data Integrity and Confidentiality.
VPN Tunneling Protocols.
Data Integrity and Confidentiality.
VPN Tunneling Protocols.
PPTP.
L2F.
L2TP.
Ipsec.
MPLS.
L2F.
L2TP.
Ipsec.
MPLS.
5. Ipsec.
Basic IPsec Concepts.
Authentication Header.
Encapsulating Security Payload.
Internet Key Exchange.
IPsec Implementation.
Security Protocols.
Security Associations.
Security Databases.
IPsec and VPNs.
Security Associations.
Security Databases.
IPsec and VPNs.
Authentication Header.
Encapsulating Security Payload.
Internet Key Exchange.
Phase 1 Negotiation.
Phase 2 Negotiation.
Key Generation in IKE.
Phase 2 Negotiation.
Key Generation in IKE.
IPsec Implementation.
Inbound Packet Processing.
Outbound Packet Processing.
Outbound Packet Processing.
6. Authentication.
Two-Party Authentication.
Trusted Third-Party Authentication.
Authentication in VPNs.
PPP Authentication.
RADIUS.
S/KEY and OTP.
RADIUS.
S/KEY and OTP.
Trusted Third-Party Authentication.
Kerberos.
X.509 Public Key Infrastructure.
Pretty Good Privacy Trust Model.
X.509 Public Key Infrastructure.
Pretty Good Privacy Trust Model.
Authentication in VPNs.
Gateway-Gateway Authentication.
Client-Gateway Authentication.
Client-Gateway Authentication.
7. Public Key Infrastructure.
PKI Architecture.
Digital Certificate Formats.
Certificate Management System.
Certificate Protocols.
Certificate Use in VPNs.
Certification.
Validation.
Certificate Revocation.
Trust Models.
Validation.
Certificate Revocation.
Trust Models.
Digital Certificate Formats.
X.509 Digital Certificate.
PGP Certificate.
PKCS #6, Extended-Certificate Syntax Standard.
X.509 Attribute Certificate.
PGP Certificate.
PKCS #6, Extended-Certificate Syntax Standard.
X.509 Attribute Certificate.
Certificate Management System.
Certification Authority.
Registration Authority.
Certificate and CRL Repository.
Registration Authority.
Certificate and CRL Repository.
Certificate Protocols.
Certificate Use in VPNs.
Authentication.
Key Management.
Access Control.
Key Management.
Access Control.
8. Access Control.
Access Control Policy.
Access Control Mechanisms.
Access Control Policy Management.
Access Control in VPNs.
Attributes and Conditions.
Access Control Rules.
Access Control Rules.
Access Control Mechanisms.
Access Control Lists.
Capabilities Lists.
Capabilities Lists.
Access Control Policy Management.
Distributed Policy Management.
Centralized Policy Management.
Policy Repository.
Centralized Policy Management.
Policy Repository.
Access Control in VPNs.
III. VPN SOLUTIONS.
9. VPN Gateways.
VPN Gateway Functions.
Gateway Configuration and Provisioning.
Gateway Management.
Gateway Certification.
Interaction with Firewalls.
VPN Design Issues.
A VPN Solution Scenario.
Site-to-Site Intranet VPN Functions.
Remote Access VPN Functions.
Extranet VPN Functions.
Forwarding, Routing, and Filtering Functions.
Advanced Functions.
Remote Access VPN Functions.
Extranet VPN Functions.
Forwarding, Routing, and Filtering Functions.
Advanced Functions.
Gateway Configuration and Provisioning.
Gateway Identity Information.
External Device Information.
Security Policy Information.
External Device Information.
Security Policy Information.
Gateway Management.
Configuration Management.
Network Monitoring.
Accounting Information.
Network Monitoring.
Accounting Information.
Gateway Certification.
Interaction with Firewalls.
VPN Gateway and Firewall in Parallel.
VPN Gateway and Firewall in Series.
Hybrid Configurations.
VPN Gateway and Firewall in Series.
Hybrid Configurations.
VPN Design Issues.
A VPN Solution Scenario.
10. VPN Clients.
VPN Client Functions.
Operating System Issues.
Operational Issues.
VPN Clients for Windows.
VPN Clients for Other Platforms.
Alternative VPN Clients.
A Remote Access VPN Scenario.
Operating System Issues.
Microsoft Windows.
Other Operating Systems.
Other Operating Systems.
Operational Issues.
Working with the Corporate Firewall.
Working with Network Address Translation.
Fragmentation and MTU Issues.
Private and Public Domain Name Servers.
WINS Server Issues.
Working with Network Address Translation.
Fragmentation and MTU Issues.
Private and Public Domain Name Servers.
WINS Server Issues.
VPN Clients for Windows.
Layer 2 Clients.
IPsec Clients.
L2TP/IPsec Combination Clients.
VPN Client Software Installation.
IPsec Clients.
L2TP/IPsec Combination Clients.
VPN Client Software Installation.
VPN Clients for Other Platforms.
Layer 2 Implementations.
IPsec Implementations.
IPsec Implementations.
Alternative VPN Clients.
SSH as VPN Client.
SOCKS and SSL as VPN Client.
User-Level Daemon.
SOCKS and SSL as VPN Client.
User-Level Daemon.
A Remote Access VPN Scenario.
11. VPN Network and Service Management.
Network Management Standards.
Network Management Architecture.
SNMP.
VPN Management.
Service Management.
International Issues.
Network Management Architecture.
Network Management Station.
Managed Nodes.
Network Management Protocol.
Management Information.
Probes.
6 Other Means of Management.
Managed Nodes.
Network Management Protocol.
Management Information.
Probes.
6 Other Means of Management.
SNMP.
VPN Management.
Managing Tunnels.
VPN Management in a Service Provider Environment.
Secure Management Tunnel in VPN.
Out-of-Band Access for Management.
VPN Management in a Service Provider Environment.
Secure Management Tunnel in VPN.
Out-of-Band Access for Management.
Service Management.
Service Level Agreement.
Network Operations Center.
Customer Portal.
Network Operations Center.
Customer Portal.
International Issues.
12. VPN Directions: Beyond Connectivity.
Evolutions in Network Infrastructure.
Evolutions in VPNs.
Internetworking Beyond Connectivity.
Evolutions in VPNs.
Internetworking Beyond Connectivity.
Network Security.
Quality of Service.
Intelligence in the Network.
Quality of Service.
Intelligence in the Network.
Acronyms.
References.
Index. 0201702096T04262001