![Page 1: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/1.jpg)
Virtual Private Network (VPN)
Sample_OneNote Page 1
![Page 2: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/2.jpg)
Why Virtual Private Network (VPN)?
Sample_OneNote Page 2
![Page 3: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/3.jpg)
The General Idea: Using "Proxy"
Sample_OneNote Page 3
![Page 4: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/4.jpg)
Proxy at the Transport LayerSSH Tunneling
Sample_OneNote Page 4
![Page 5: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/5.jpg)
Proxy at the IP LayerIP Tunneling
Sample_OneNote Page 5
![Page 6: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/6.jpg)
IP Tunneling: IPSec Approach
Sample_OneNote Page 6
![Page 7: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/7.jpg)
IP Tunneling: SSL/TLS Approach
Sample_OneNote Page 7
![Page 8: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/8.jpg)
Review: Tunneling
Sample_OneNote Page 8
![Page 9: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/9.jpg)
Virtual Networking Technologies
Sample_OneNote Page 9
![Page 10: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/10.jpg)
The TUN/TAP Interface
Sample_OneNote Page 10
![Page 11: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/11.jpg)
Packet Tunneling
Sample_OneNote Page 11
![Page 12: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/12.jpg)
How VPN Works: Outgoing Traffic
Sample_OneNote Page 12
![Page 13: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/13.jpg)
Creating TUN/TAP Interface
Creating a TUN Interface
Show the TUN Interface
Set the IP Address for the TUN Interface
Bring Up the TUN Interface
Sample_OneNote Page 13
![Page 14: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/14.jpg)
Network Configuration
Sample_OneNote Page 14
![Page 15: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/15.jpg)
Read from the TUN Interface (ping 192.168.60.5)
Read From the TUN Interface
Sample_OneNote Page 15
![Page 16: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/16.jpg)
Create a Packet
Write to the TUN Interface
Write to the TUN interface
# cat icmp.bin >& 3
Sample_OneNote Page 16
![Page 17: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/17.jpg)
Question: Network Setup
Question: Where should we run the following commands?
A: $ sudo route add -net 10.4.2.0/24 gw 192.168.60.5 eth19
B: $ sudo route add -net 10.4.2.0/24 tun0
C: $ sudo route add -net 192.168.60.0/24 tun0
Sample_OneNote Page 17
![Page 18: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/18.jpg)
Testing VPN
Sample_OneNote Page 18
![Page 19: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/19.jpg)
Case Study: SURA (Syracuse University VPN)
Sample_OneNote Page 19
![Page 20: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/20.jpg)
SURA: Before Running VPN
Interfaces
Routing table (Windows: Route PRINT)
Sample_OneNote Page 20
![Page 21: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/21.jpg)
SURA: After Running VPN
Interfaces
Routing table
Sample_OneNote Page 21
![Page 22: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/22.jpg)
Question: Find the IP Addresses
What is my computer’s real IP address (i.e., the IP address of my WiFi card)?1.
What is the IP address of the VPN server? 2.What is the IP address of my TUN interface? 3.
SU's VPN is called SURA. If you run SURA on your computer, once you have logged in, a VPN tunnel will be established between your host machine and SU's network (128.230.0.0/16). After I run SURA, the routing table on my computer appears as in the picture below. Please answer the following questions.
Sample_OneNote Page 22
![Page 23: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/23.jpg)
Lab Setup
Manually set up the IP address for the "Internal Network" adaptor on VPN Server
Sample_OneNote Page 23
![Page 24: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/24.jpg)
Creating a VPN Tunnel using TUN/TAP
Sample_OneNote Page 24
![Page 25: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/25.jpg)
Packet Flow
Sample_OneNote Page 25
![Page 26: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/26.jpg)
Encrypting the Tunnel
Packet Flow
Sample_OneNote Page 26
![Page 27: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/27.jpg)
Bypassing Firewalls: Another Popular Use of VPN
Internet
Sample_OneNote Page 27
![Page 28: Virtual Private Network (VPN) - Syracuse Universitywedu/online/Sample_OneNote.pdf · Virtual Private Network (VPN) Sample_OneNote Page 1 . Why Virtual Private Network (VPN)? Sample_OneNote](https://reader036.vdocuments.site/reader036/viewer/2022081405/5f0bee507e708231d432ec4d/html5/thumbnails/28.jpg)
A Related Lab: Bypassing Firewalls using VPN
Sample_OneNote Page 28