IPsec Virtual Private Network Fundamentals

Chapter 12. Solutions for Handling Dynamically Addressed Peers There often exist areas of IPSec design that could benefit from more flexible peering options. From this demand arose the creation of solutions to handle dynamically addressed IP...

Dynamic Crypto Maps Dynamic crypto maps enable IPSec to negotiate ISAKMP and IPSec Security Associations (SA) that are initiated from remote endpoints, the addresses of which are unknown. Dynamic crypto maps by themselves do not enable a virtual p...

Tunnel Endpoint Discovery Tunnel Endpoint Discovery (TED) is a logical extension to the dynamic crypto maps that allows an endpoint to dynamically, proactively discover a previously unknown peer. TED therefore allows peers to proactively initiate ...

Case StudyUsing Dynamic Addressing with Low-Maintenance Small Home Office Deployments In this case study, we will discuss a large enterprise IPSec VPN deployment. The enterprise, in this case, is a large insurance provider that services customers ...

Summary As workforces become increasingly mobile in nature, so does the need to gain secure network access from a varying physical locations. Dynamic peers allow network administrators to ensure network connectivity when remote network peers are...