Ccna routing and Switching Complete Study Guide

Compatibility with broadband technology    For remote and traveling users and remote 

offices, any Internet access can provide a connection to the corporate VPN. This allows 

users to take advantage of the high-speed Internet access of DSL or cable modems.

---

Virtual Private Networks 

915

Enterprise- and Provider-Managed VPNs

VPNs are categorized based upon the role they play in a business—for example, enterprise-

managed VPNs and provider-managed VPNs.

You’d use an enterprise-managed VPNs if your company manages its own VPNs, which 

happens to be a very popular way of providing this service. To get a picture of this, check 

out Figure 21.21.

f i g u r e   21. 21     Enterprise-managed VPNs

Business Partner

with a Cisco Router

Regional Office with

a Cisco ASA Firewall

SOHO with a

Cisco Router

Mobile Worker with

Cisco AnyConnect on

a Laptop Computer

Perimeter

Router

Site-to-Site VPN

Remote-Access VPN

Cisco ASA

Firewall

Main Site

Internet

Service

Provider

There are three different categories of enterprise-managed VPNs:

Remote-access VPNs allow remote users such as telecommuters to securely access the 

corporate network wherever and whenever they need to.

Site-to-site VPNs, or intranet VPNs, allow a company to connect its remote sites to 

the corporate backbone securely over a public medium like the Internet instead of 

requiring more expensive WAN connections like Frame Relay.

Extranet VPNs allow an organization’s suppliers, partners, and customers to be 

connected to the corporate network in a limited way for business-to-business (B2B) 

communications.

Provider-managed VPNs are pictured in Figure 21.22.

---

916

 

Chapter 21 

■

  Wide Area Networks

f i g u r e   21. 2 2     Provider-managed VPNs

HQ

BR1

BR2

Provider

Network

BR3

Layer 2 MPLS VPN (VPLS and VPWS):

•

Customer routers exchange routes directly.

HQ

BR1

BR2

BR3

•

Some applications need Layer 2 connectivity to work.

Layer 3 MPLS VPN:

•

Customer routers exchange routes with SP routers.

•

It provides Layer 3 service across the backbone.

L2

MPLS-VPN

L3

MPLS-VPN

And you need to be familiar with the two different categories of provider-managed 

VPNs: