Taly 28,2082
Relcvicl @
1.
fe Viwleeil Privcrle Nelowor '
; sheaigh Horeca +
»
The idea of a VPN
BEM Gece: ine gicbal Teteunat
Mmeryel the Conlenls. The teen povcde antes |
ect the ase of encoyption means that
SOmmmunication belween any parr F Om
Pemains concealed fom assess. Fo lew Ff
Vitleal isos because a VPN does not weeps
dedicated leved cixcuils 40 connect one ste
Bier
- INTERNET
enerypiion used \
Figuoe: Mastection Of a VPN that cses enceyphi
then sending dida across the qlcbal inteonel
between teso touters of an Organization.Heew does YPN technology male A posible 4o
Jerecle prince intwanel thal does not provide abr
eel connectivity fie hosts on the coaporcte diol
— Baud cr ua ee vi
/ addaew Z
Site a ‘6 Ne * (site @
Using subnet ( rrvreener, +m: Petals
{ |
10-2.0.0 4 40.2.0.0
es, A Fe AY
addess
Figure : Example of a ven dot inlerconnects oo
ses over dhe glokal felernck while computers
CY eG etry yotoble Ci-e , poivate)
oaddnesse>
To the Figuae the caganizalion has chosen bo we
dhe ron-wetoble TP.4 gcfix 10.0.0.0/8 Ca pectin thal
has been veseoved fis ce in a poate nelwool’)
Site 1 uses subnet 30.1.0.0/16 wile site 2 wes
abnel Jo. 2:0:0/16 . Only two globcilly valid re
eddzesses ame needed +0 make a VIN possible -One
is assigned to the connection foom toutes R1 to
je Tobeonet and the othex is assigned +o the
Enpnection faeme Re to the Jobeenet . The abo stles
may be fax apazt and may abluin sevice Foor
wo indepeadert Tses , ahich means thal the
be unzelatec
evo globally - valid add sesses meyRocless anc hos cul
Peivale addeess
in VPN dunreling
4 re addecsser
Pemlicipede
globally -
Abed oo we
Whol does nar provide bo a host
A privele , non - voudable ddwecs ord
doer NAT device opeoale?
NAT poovides TP-level «coos?
Bd the qobal Teteenet »
Ye site
belween hosts
cotthout
lol a sie
wequizing each host ad
globally-valid 1P addeess -
NAT device 5
NAT box , belurcen reluscok Cs) ot the site
the vest of the Iolernel as Figuze illosteates
OF host the sile,
wouter that
of view
parce ding
ioserally calle
Ao a
Foom the point a
4to a
Teteonet - That is, 4
Pica bLapies
box appecas
do the
| onrects
jc
lal the ste & sel up to
Ube poot
box . Foor
do the site,
hast.
seavice
[delaware to the war
lof an Is chat poovides
fs be a single
NAP box appeco>
bbe
sthe NAT box obtain
frac
globally valid IP acldre to
, aed appeoss
[the eddsess do sen ond neceive | d, Lag samsWhen a Wan Siu sik delagacen 4
la deslination on Deo ilatecl Wat clare
Prlowmation abaah dhe cedgaing dcdegeans ¢ induding)
la recond of 4, Piginal sender} in a dalle,
changes Field iq the header',and seads the
rcdified dalageam Ao ile destination Ta peakiculcr]
NAT changes {he ere ee bates Ao aokie tk
EEA erie) cornbl, Foor the: WAT
ee - he ioteerak Mih mercies
la Achagaans Peplies the aeply will he seck to Ah
PAT bow (Ven seccres a dalaquam from the
ik Acble , Finds 4he|
ia Ahe heades and
Haotesnet j the uap A
original sender jchonges telds
Hoswced: the datagean, 14h paliaalar | NAT changes
Phe rp destinalion | addvess Lo dhe private addmess
Hhat dhe tos at the le is wing,
Tole tel Views Sike viecos the
NAT box a a NAT box as a
single hosk default scaler
&
TNTERNET
\
Hosks C and saikers) al Ube ‘site
only se ron-rotcble addresBee BES beeleclion that
in CO Sree ton, secusily ?
encompasses many 2s