3 - Cisco Icnd2 - Vpns

Front 1

VPN: Describe 3 generic types of VPNs

Back 1

1. Intranet - connects all computers at two sites of same org.
2. Extranet - connects all computers at 2 sites of diff. org
3. Access - connects individual user to enterprise network

Front 2

VPN: Describe 3 encryption algorithms and their bit-lengths

Back 2

1. DES (56)
2. 3DES (168)
3. AES (128 or 256)

Front 3

VPN: Describe the Diffie-Hellman key exchange options

Back 3

1. DH1 - 768 bit
2. DH2 - 1024 bit
3. DH5 - 1536 bit

Front 4

VPN: Describe four properties of ESP

Back 4

1. Weak authentication
2. Message Integrity
3. Encryption
4. Anti-replay

Front 5

VPN: Describe two properties of AH

Back 5

1. Strong authentication
2. Message integrity

Front 6

VPN: Define SSL VPNs

Back 6

Also called WebVPN; simple, but limited to web-based applications
it has the option of only requiring an SSL-enabled web browser.
It is compatible with DMVPNs, Cisco IOS Firewall, IPsec, IPS, Cisco Easy VPN, and NAT.

Front 7

VPN: which show command displays the encryption algorithm, hash algorithm, authentication method, and Diffie-Hellman group configured, as well as default settings?

Back 7

show crypto isakmp policy

Front 8

VPN: List four AH message integrity options and two authentication options

Back 8

Message integrity:
HMAC - MD5 (128 bit shared key)
HMAC - SHA1 (160, 256, or 512 bit)
Authentication:
Pre shared keys
RSA digitial signatures

Front 9

VPN: What is HMAC?

Back 9

Hash-based Message Authentication Code, guarantees message integrity. Not needed if ESP is used.