Ping

VPNs and tunnels

Topic 15 of 26. 0 questions:

What this topic covers
  • site to site vs remote access
  • GRE and why GRE over IPsec
  • AH vs ESP
  • transport vs tunnel mode
  • IKEv1 phase 1 and phase 2 main vs aggressive mode
  • IKEv2 differences
  • security associations and SPI
  • crypto maps vs VTI
  • NAT traversal UDP 4500
  • Diffie Hellman groups
  • PFS
  • DMVPN phases 1 2 3 and NHRP
  • SSL VPN vs IPsec client
  • WireGuard
  • a tunnel that is up but passes no traffic
  • MTU and MSS in tunnels

Study it in depth on Octet.