A virtual private network (VPN) extends a private network across a public network, such as the Internet. This lesson introduces the network concepts behind VPNs, explains tunneling, and distinguishes common VPN use cases.
A network is a group of communicating computers, called hosts. Hosts exchange data using communication protocols and are identified on networks by addresses such as IP addresses. Network hardware—including routers, switches, and network interface controllers—helps move data between hosts.
All flashcards
What is a VPN?
A virtual private network is an overlay network that extends a private network across another network, commonly using tunneling and encryption.
What does a tunneling protocol do?
It transfers network messages between tunnel endpoints across an underlying network, carrying the traffic through a logical tunnel.
What is a host-to-network VPN used for?
It lets a remote host, such as an off-site employee’s computer, securely access resources on a private organization network.
How does a site-to-site VPN differ from host-to-network access?
A site-to-site VPN connects two networks through gateway devices, whereas host-to-network access connects an individual remote host to a network.
What is a provider-provisioned VPN?
A VPN implemented on infrastructure operated by a service provider or large enterprise, using virtual segments to keep parts of the network logically separated.
Quiz questions
What is a VPN in relation to an existing network?Answer: A logical network extending private connectivity across existing infrastructure.
What is the role of a tunneling protocol in a VPN?Answer: It encapsulates network messages for transport across an underlying network between endpoints.
Which VPN configuration lets an off-site employee connect to an organization's private network?Answer: Host-to-network VPN.
In a site-to-site VPN, which devices typically establish the tunnel?Answer: Gateway devices at each network location.
A business connects its headquarters and datacenter networks through their gateways. Which configuration fits?Answer: A site-to-site VPN connecting the two networks.