MicroNugget: IPsec Site to Site VPN Tunnels Explained | CBT Nuggets

  Рет қаралды 428,497

CBT Nuggets

CBT Nuggets

12 жыл бұрын

Start learning cybersecurity with CBT Nuggets. courses.cbt.gg/security
In this video, CBT Nuggets trainer Keith Barker takes a look at the concepts behind how IPsec site-to-site VPNs work. Keith uses a protocol analyzer to show you the before and after picture of a packet that's been encrypted and transmitted.
Sending packets in the wild can be dangerous. The Big Bad Internet is just waiting for you to send sensitive or important information so it can be sniffed out and exploited. So any time you send a packet out there, it's a good idea to give it some protection. IPSec lets you do that
Imagine a company with two geographically separated offices. They want full data networking between the two sites. All the servers and resources of both should be shared fully between the two.
With high-speed connectivity at both sites, the impulse might be to just send it all over the internet. But that can pose a security risk.
An IPsec VPN site-to-site tunnel can provide a number of things. First, confidentiality thanks to encryption. Also, integrity - IPsec can confirm that no bits were manipulated in transit. It can even provide authentication and anti-replay support.
See the benefits of IPsec VPN tunnels and what the packets themselves look like before and after transmission.
0:25: When you might need a VPN tunnel
1:00: The risk of using the Internet
1:45: What are IPsec’s claims to fame?
2:40: How does it do it?
3:55: Two perspectives of what the VPN looks like
5:10: Side-by-side comparison of the encrypted packet
6:40: Overview
🌐 Download the Free Ultimate Networking Cert Guide: blog.cbt.gg/i297
⬇️ 13-Week Study Plan: CCNA (200-301): blog.cbt.gg/on5i
Start learning with CBT Nuggets:
• Intro to Networking | courses.cbt.gg/tuv
• MPLS Fundamentals | courses.cbt.gg/u7u

Пікірлер: 159
@bohemians77
@bohemians77 10 жыл бұрын
You have a remarkable gift for teaching in plain language; I have watched a few of your videos on YT and gained in understanding, even though I am not an IT novice - I sense you enjoy what you do: thanks for taking the time to assist others.
@ShivamMiglani
@ShivamMiglani 4 жыл бұрын
You teach amazingly well. I can see the hard work you put into first explain the theory and then back it up with a practical example.
@AfricanAstro
@AfricanAstro 5 жыл бұрын
This was incredible. Simple, clear, well-paced, sticks to the subject, practical use-case. Just very well done.
@BijouBakson
@BijouBakson 4 жыл бұрын
This stuff was pure gibberish before I started studying Cisco; now it's pure gold. Thank you very much CBT Nuggets.
@OsvaldoMaria
@OsvaldoMaria 4 жыл бұрын
Your enthusiasm made this much easier to understand
@jairusan
@jairusan 5 жыл бұрын
Best of the best! Super simplified nugget, this is the best explanation of IPsec I have seen, very informative and useful. Thank you so much, Keith!
@felipegrings9357
@felipegrings9357 2 жыл бұрын
Simple. Easy to Understand. Straight to the point. Awesome!
@elpidiagomez3701
@elpidiagomez3701 5 жыл бұрын
Thanks for the vid Mr. Barker...you take complicated topics and explain them so i can understand, keep up the great work!!
@ArindamChattopadhya
@ArindamChattopadhya 4 жыл бұрын
Your style of explaining is second to none. 👍🙏🙏🙏
@agustinothadeus
@agustinothadeus 5 жыл бұрын
The way you explain it makes it seem so easy to the point where it becomes funny!!, thank you
@AshwinRamdin
@AshwinRamdin 11 жыл бұрын
Hi Keith, thank you for taking the time and answering my question. Great video!
@ksbpsb
@ksbpsb 12 жыл бұрын
great job by keith barker and one of the best trainer on the internet
@paulykamau
@paulykamau 5 жыл бұрын
Amazing! I'm blown away. Thank you for the intelligent explanation.
@KeithBarker
@KeithBarker 11 жыл бұрын
Hello Ashwin- Yes, you've got it. The outside IP header will have the source IP of the VPN gateway sending the packet, with a destination IP header of the remote VPN gateway who will be receiving the packet over the internet. When the receiving router gets the packet, it will de-encapsulate and throw away the old outside header, decrypt the contents (which include the initial IP header addresses the client was using) and continue to route the packet. Keith
@annehipolito7305
@annehipolito7305 2 жыл бұрын
Thanks. Been doing site to site VPN for years now. Still is reliable for small and medium sized businesses :)
@myretarnation
@myretarnation 9 жыл бұрын
Great description and even I got. :) Very good voice to match the video tutorial. Thanks Keith!!
@KeithBarker
@KeithBarker 11 жыл бұрын
You are very welcome Samer! Best wishes, Keith
@KasunMadurasinghe
@KasunMadurasinghe Жыл бұрын
This is one of the coolest explanations I've seen ..You've got talent.. Kudos
@chickenman1176
@chickenman1176 2 жыл бұрын
Thank you for not having a monotone voice!
@anastasijat.4138
@anastasijat.4138 9 жыл бұрын
Awesome video, love your enthusiasm! :)
@MojoTojoChannel
@MojoTojoChannel 11 жыл бұрын
Man you're way of teaching is just awesome.. pls keep on doing what you're doing..
@SarabjitMadan
@SarabjitMadan 8 жыл бұрын
This was so well illustrated and explained. Thanks
@guerrillafocus
@guerrillafocus 2 жыл бұрын
AH would've been good to mention as well. You do teach very well Keith!
@Leo-uy4qv
@Leo-uy4qv 2 жыл бұрын
Excellent, learned something new. thanks for showing packet tracer working in the background
@MrGvui
@MrGvui 9 жыл бұрын
Thanks so much, really simple and clear explanation.
@coveysax
@coveysax 8 жыл бұрын
Subscribed thanks to this video. You sound so happy talking about this lol. Thanks for the vid!
@pimguilherme
@pimguilherme 4 жыл бұрын
This is just so fun, thanks man!!
@manjunathnarendra3854
@manjunathnarendra3854 7 жыл бұрын
Thank you sir...You know exactly how to teach things..wonderful video
@iMPRE7ed
@iMPRE7ed 11 жыл бұрын
Made it so clear and easy! Great job!
@tariksotalei4808
@tariksotalei4808 2 жыл бұрын
Brilliant video...simple and practical example ...loved it.
@YosiFeig
@YosiFeig 11 жыл бұрын
Excellent. You did a great job. Simple to understand. Thanks!
@thebluegoonie
@thebluegoonie 3 жыл бұрын
I hadn't realised how old this vid is until I saw the Windows XP Start button! Still good, though, thanks.
@microsoftsarker
@microsoftsarker Жыл бұрын
This series is awesome.
@HongeraGideon
@HongeraGideon 5 жыл бұрын
How can someone thumb down this video, fantastic explanation.
@vaihi1
@vaihi1 5 жыл бұрын
Bro I loved this video. Thank you so much haha you have a gift at teaching simply
@alitajvidi5610
@alitajvidi5610 5 жыл бұрын
Excellent teacher!!! Thanks.
@AlexKontent
@AlexKontent 5 жыл бұрын
Great tutorial man! Great work, Great examples!
@snehanaik4304
@snehanaik4304 2 жыл бұрын
thanks for this detailed explanation with the actual ping request!
@johnson554671
@johnson554671 4 жыл бұрын
Good Job Keith!
@johnconnor9787
@johnconnor9787 5 жыл бұрын
Great explanation! Thank you!!!
@ketansanil6046
@ketansanil6046 10 жыл бұрын
Great Explanation in Simple Language
@abhijeetagrawal5817
@abhijeetagrawal5817 2 жыл бұрын
Brilliant.. Thanks a lot for simplifying it.
@sobc2737
@sobc2737 3 жыл бұрын
Thank you for such a great explanation.
@MrUglyDave
@MrUglyDave 4 жыл бұрын
Thank you so much, so well explained
@shai2009
@shai2009 9 жыл бұрын
very professional video. thanks!
@Zehle325
@Zehle325 10 жыл бұрын
This was great! :D
@haimbendanan
@haimbendanan 8 жыл бұрын
Thank for this video!
@GL455_
@GL455_ 2 жыл бұрын
Man! You mad helpful! So glad I found ya!
@newkool100
@newkool100 9 жыл бұрын
thanks. good one. well explained. short and to the point.
@ryutkin
@ryutkin 8 жыл бұрын
You are amazing! I've never heard someone explain something so well! Brilliant!
@proplemsolver5995
@proplemsolver5995 11 жыл бұрын
شكرا للدكتور هيازع البارقي خبير امن نظم المعلومات
@IkramKhan-gk3wl
@IkramKhan-gk3wl 7 жыл бұрын
Dear Sir, you teach very very nice "super nice" than the other
@chechobarbery
@chechobarbery 10 жыл бұрын
Excelente !!!!!!!!!!! Congrats!!!!!!!!!!!
@techtejas804
@techtejas804 3 жыл бұрын
Superb! Got it exact
@fightbackmatix
@fightbackmatix 11 жыл бұрын
Great video :) Thanks again!
@ManishYadav0719
@ManishYadav0719 2 жыл бұрын
You Deserved 5 star ⭐ believe me
@virajayachit5702
@virajayachit5702 9 жыл бұрын
Thank you. Awesome work
@davidnadon6879
@davidnadon6879 6 жыл бұрын
viraj ayachit 🎒😈🍯👨‍👦👚👨‍👦‍👦♥️U.K.
@ahmedabduljabar6269
@ahmedabduljabar6269 10 жыл бұрын
Keith that was amazing .. many thanks :)
@KeithBarker
@KeithBarker 10 жыл бұрын
Ahmed Abduljabar Thanks for the feedback! It is appreciated. -Keith
@SuperKirkb
@SuperKirkb 9 жыл бұрын
Keith Barker My best instructor
@BJ24hk
@BJ24hk 11 жыл бұрын
awesome video thank u so much !
@OnsDlaili1
@OnsDlaili1 9 жыл бұрын
so helpful thx !
@amankinson7384
@amankinson7384 10 жыл бұрын
Great Stuff!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
@nemanjajovic2854
@nemanjajovic2854 8 жыл бұрын
Very nice !
@ryanbarrera2595
@ryanbarrera2595 5 жыл бұрын
Hi Keith..What tool are you using in creating your topology? and also the tool you use to capture the packet
@RaphaelMeyer
@RaphaelMeyer 8 жыл бұрын
awesome dude. thx
@nikl0618
@nikl0618 10 жыл бұрын
Awesome video, thank you so much!
@jaafarali1417
@jaafarali1417 11 жыл бұрын
great and simplified vedio
@andrejss
@andrejss 3 жыл бұрын
Amazing! Thank you!
@cbtnuggets
@cbtnuggets 3 жыл бұрын
Our pleasure! Glad you were able to find value in this video! :)
@josecarlosglz.barron9314
@josecarlosglz.barron9314 10 жыл бұрын
good job!
@happyshay1977
@happyshay1977 4 жыл бұрын
Great facilitated! thanks
@cbtnuggets
@cbtnuggets 4 жыл бұрын
Glad it helped!
@MaHutchy
@MaHutchy 7 жыл бұрын
IPSec or OpenVPN, which would you suggest in terms of security?
@ibarrax3872
@ibarrax3872 6 жыл бұрын
THANK YOU !!!!!!!!!!!!!!!!!!!!!!!
@kracherjon3938
@kracherjon3938 3 жыл бұрын
Danke Bre
@HylianEvil
@HylianEvil 11 жыл бұрын
You're awesome.
@senyk1
@senyk1 2 жыл бұрын
Thanks for the video, what did you use to draw on the screen? Is that a pad you can hook up to a computer?
@pablocaiza.
@pablocaiza. 3 жыл бұрын
thank you
@markarca6360
@markarca6360 9 жыл бұрын
To check the data integrity of the packets as they are sent means they undergo tests like CRC (cyclic redundacy checking).
@AshwinRamdin
@AshwinRamdin 11 жыл бұрын
Hi Keith, At around <a href="#" class="seekto" data-time="185">3:05</a> you say the packet is going to be encapsulated. Does this mean that the Packet basically has 2 Destination and 2 Source IP adresses, from which only 1 Destination and 1 Source Address are visable when the packet is send over the Internet?
@Jdiddy1792
@Jdiddy1792 9 жыл бұрын
How were you able to capture the packets sent from machine to router? Then router to web?
@metalliciano
@metalliciano 8 жыл бұрын
if I get the videos on your CBT Nuggets, would subtitles in my language?
@SwooshxWu
@SwooshxWu 11 жыл бұрын
That is awesome.
@kingofhavila9850
@kingofhavila9850 2 жыл бұрын
Your channel enlighten some dark spots i had in networking, I'd like to thank you I have my network security exam at the end of this month. Otherwise, would you tell me what software are you using for the facilitation of the course?
@mitpatel4268
@mitpatel4268 4 жыл бұрын
Hi Keith, I have a short question. Why do we not use SSL universally/predominantly for VPNs but use IPSec? One good reason to use SSL as opposed to IPSec is the popularity of port on which it works (443). The positive is that it's open everywhere! Am I missing something?? Maybe one similar question should be - What prevents us from using SSL instead of IPSEC protocol suite in Site-to-site tunnels?
@issiagadiallo3684
@issiagadiallo3684 9 жыл бұрын
Hello CBT, This was quit a great one. Could you please share a simulated one with packet tracer or GNS3 what ever ... Please. it will be very helpfull begginers as me :D
@ashishsontakke
@ashishsontakke 3 жыл бұрын
The VPN client installed in our home machines will do the ESP encapsulation at machine itself before it sends to our ISP ? Is that right ? In this example you said Router R1(ISP's router) is doing it.
@viclam1633
@viclam1633 3 жыл бұрын
Does Ipsec add latency to voip calls because it has to encrypt the message? When would I turn on or off ipsec? Any help would be appreciated.
@IQ88612
@IQ88612 5 жыл бұрын
hi , thanks for your nice video but, software did you use??
@ashleighholmes6670
@ashleighholmes6670 3 жыл бұрын
good god this was helpful
@cbtnuggets
@cbtnuggets 3 жыл бұрын
We're so glad to hear that, Ashleigh! Thank you for learning with us.
@KeithBarker
@KeithBarker 11 жыл бұрын
My pleasure! Glad you liked the video. Keth
@cesarausan
@cesarausan 10 жыл бұрын
Muchas Gracias! implementar una VPN.
@poligon333
@poligon333 11 жыл бұрын
Thanks
@hosseinsabouri3121
@hosseinsabouri3121 4 жыл бұрын
Thanks. But how do you connect two routers with each other? Do you use Public IP addres forwarding to each Router? For Example....How can i RDP from 172.16.0.2 to 192.168.0.20 ?
@Shake_Well_Before_Use
@Shake_Well_Before_Use 2 ай бұрын
Hi Keith, Can u help with something. I have this network that I'm working on packet tracer. I have two sites site A and B. Site A is ASN 10 and B is ASN 20. In the middle is an ISP router on the ASN 50. I use OSPF for the interior routing on my two sites and bgp has been configured successfully on all three routers and I managed to get IP connectivity from hosts on site A to B and vice versa. The thing is when I implemented the IPsec VPN tunnel, the hosts on site A can reach until the router that connects the destination hosts but never reached them. The thing is the pings from a host in A reaches all networks inside site B except the network of the destination host. Like if 192.168.1.0 / 24 is the source network in site A and 192.168.2.0 / 24 is the destination network on B, the hosts on A can reach all networks except the network on which my destination hosts live. Pls help me understand what could have gone wrong
@MrJinsilverx
@MrJinsilverx 11 жыл бұрын
Hi, I just wanna ask. What will happen if I use an access-list with permit ip any any in Ipsec VPN? Will the network be able to browse the internet?
@erikvandervelden4566
@erikvandervelden4566 Жыл бұрын
Nice explanation. What i'm missing is: Who to do this? How do i create R1 and R2? After all, it's about. How to get this to work.
@gambettonsa4528
@gambettonsa4528 4 жыл бұрын
When PC1 pings 192.168.0.20, how does router 1 know that private IP is at site 2 rather than any other company using the same private address for a host? I mean it's on the internet right? it could go anywhere, that has me confused. Can you please explain?
@abhyudaychattopadhyay8632
@abhyudaychattopadhyay8632 8 жыл бұрын
So.. the routing table of R1 is supposed to contain the entire range of IPs of PCs under R2, or else how does it understand which of the requests are to be encrypted and sent to R2's IP ???? (and vice versa)
@MARINADELY777
@MARINADELY777 11 жыл бұрын
thanks
@shernaj255
@shernaj255 6 жыл бұрын
what ports? and IPsec uses what kind of routing paths? bgp? and how do they open sessions with eachother? sorry
@AWSwithChetan
@AWSwithChetan 2 жыл бұрын
Great video on VPN tunnels. I was trying to setup S2S VPN in AWS and what I did not understand is role of Inside IPv4 addresses (typically 169.254.0.0/16 range). It would be great if you could help me understand what these inside IPs are, why they are used, are these actual IPs?
@psyedd
@psyedd 11 ай бұрын
This is a year late but that looks to be APIPA range. Just google that and I think you'll be good to go
@KeithBarker
@KeithBarker 11 жыл бұрын
The the crypto ACL says any-any, there are 2 challenges. The two peers will need to agree on that to bring up a tunnel, and then secondly, all traffic leaving the VPN peers would be sent to the peer on the other side. There may be some corner cases where something similar to that would work, but for general site to site VPNs it would be a configuration/design error.
IP Sec VPN Fundamentals
14:55
LearnCantrill
Рет қаралды 156 М.
VPN Types Options and Protocols Explained
10:24
CBT Nuggets
Рет қаралды 24 М.
Smart Sigma Kid #funny #sigma #memes
00:26
CRAZY GREAPA
Рет қаралды 4,7 МЛН
MicroNugget: What is Multi-Protocol Label Switching (MPLS)?
6:58
CBT Nuggets
Рет қаралды 162 М.
IPSec Site to Site VPN tunnels
18:44
Keith Barker - The OG of IT
Рет қаралды 491 М.
MicroNugget: BGP Configuration Explained | CBT Nuggets
7:19
CBT Nuggets
Рет қаралды 184 М.
VPNs, Proxies and Secure Tunnels Explained (Deepdive)
13:12
LiveOverflow
Рет қаралды 78 М.
VPNs Explained | Site-to-Site + Remote Access
9:08
CertBros
Рет қаралды 822 М.
What is OSPF and How Does It Work?
12:07
CBT Nuggets
Рет қаралды 93 М.
Understanding AH vs ESP and ISKAKMP vs IPSec in VPN tunnels
18:30
Ryan Lindfield
Рет қаралды 313 М.
How Hackers Move Through Networks (with Ligolo)
20:01
John Hammond
Рет қаралды 263 М.
Smart Sigma Kid #funny #sigma #memes
00:26
CRAZY GREAPA
Рет қаралды 4,7 МЛН