Cnet Lesson 13

Front 1

Remote Networking

Back 1

Enables users who are not in the same physical location to access network resources.

Front 2

Remote desktop assistance

Back 2

Both users have remote connection and see the same screen.

Front 3

RAS servers

Back 3

Combination of dial up and VPN server. Accepts multiple client connections, terminate other VPN tunnels, and route their traffic into the private network.

Front 4

RADIUS

Back 4

Remote authenication dial in user service. When a network contains several remote access servers, one can be RADIUS server and the rest are RADIUS clients.

Front 5

Diameter

Back 5

Updated version of RADIUS

Front 6

AAA

Back 6

Framework for controlling access to computing resources. How remote access systems permit, control, and audit remote client connections.

Front 7

Remote desktop protocol RDP

Back 7

Backbone of windows remote desktop system. Can encrypt, remove audio and printing, access to local files, and redirect host's disk drives and peripheral ports.

Front 8

Virtual Network Computing VNC

Back 8

Platform dependent desktop sharing system. Uses remote frame buffer protocol to determine best version of RFB they can support. Does not offer varying levels of encryption.

Front 9

Independent computing architecture ICA

Back 9

Enhances and expands on the core thin client functionality in terminal services.

Front 10

X Window system

Back 10

Uses a client server relationship to provide GUI and input device management functionality to applications.

Front 11

Nested remote connections

Back 11

When a user connected remotely to a device and that device establishes a remote connection.

Front 12

Remote access protocol

Back 12

Enables user to access a remote server and transfer data.

Front 13

Point to point PTP

Back 13

Layer 2, used to send IP diagrams over serial point to point links.

Front 14

PPPoE

Back 14

Feature and functionality of PPP to DSL connections that use Ethernet to transfer signals from carrier to client.

Front 15

EAP

Back 15

Extension of PPP and provides support for additional authenication methods.

Front 16

PEAP

Back 16

Secures EAP by creating encrypted channel between a remote client and server.

Front 17

Multilink PPP

Back 17

Provides a method for spreading traffic across multiple distinct PPP connections. Uses 2 PPP ports together.

Front 18

EAP is an extension of:

Back 18

PPP

Front 19

Tunneling

Back 19

Data transport technique in which data packet from one protocol (passenger) is transferred inside the frame or packet of another protocol (carrier).

Front 20

Voluntary tunnels

Back 20

Created between endpoints at the request of a client.

Front 21

Compulsory tunnels

Back 21

VPNs between routers. Established by routers across internet with no involvement in the part of their clients. Can be static or dynamic.

Front 22

VPNs

Back 22

Private network that is configured by tunneling through a public network (Internet).

Front 23

Intranet VPNs

Back 23

Connects sessions of a network like remote offices tying into a corporate headquarters.

Front 24

Extranet VPNs

Back 24

Connects networks belonging to different companies for the purpose of sharing resources.

Front 25

Hardware based VPN implementation

Back 25

Uses hardware such as encrypting routers.

Front 26

Firewall based VPN implementation

Back 26

Uses firewalls security mechanisms

Front 27

Software based VPN implementation

Back 27

Uses software when VPN endpoints are not controlled by the same organization.

Front 28

Site to site

Back 28

Each node on the network is connected to a remote network that may be separated by unsecure networks.

Front 29

Host to site

Back 29

VPN software must be configured on both client (host) and the server or router (site) to which the user is connecting.

Front 30

Host to host

Back 30

A single device makes a secure connection to another single device.

Front 31

PAP

Back 31

Password authenication protocol sends the client IDs and passwords as cleartext.

Front 32

CHAP

Back 32

Challenge handshake authenication protocol uses encryption to transmit authenication information.

Front 33

TACACS+

Back 33

Terminal access controller access control system plus provide centralized authenication and authorization services for remote users. Process wide encryption for authenication. Uses TCP port 49.

Front 34

PPTP

Back 34

Point to point tunneling protocol, layer 2, increases the security of PPP by providing tunneling and data encryption for PPP packets.

Front 35

L2TP

Back 35

Layer two tunneling protocol works on internet and combined the capabilities of PPTP and L2F to enable the tunneling of PPP. No encryption on it's own, uses IPsec.

Front 36

Benefits of using TACACS+ over RADIUS

Back 36

Uses TCP rather than UDP for kore reliable transport. It includes process wide encryption for aunthication, RADIUS encrypts only passwords.

Front 37

What would you use a VPN for?

Back 37

Used to give home office/travelling users access to file and email servers, and custom applications.

Front 38

Do you have to use IPsec to enable a VPN?

Back 38

No. IPsec is one technique for providing encrypted transmission across a public IP network.