Definitive design and deployment guide for secure virtual private network Learn about IPSec protocols and Cisco IOS IPSec packet processing Understand the differences between IPSec tunnel mode and transport mode IPSec VPN Evaluating features that improve scalability and fault tolerance, such as dead peer detection and control plane keepalives Overcoming the challenges of working with NAT and IPSec remote-PMTUD Explore access features, including extended authentication, mode-configuration, and digital certificates Check the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access Apply fault tolerance methods to IPSec VPN designs employing a mechanism to reduce the complexity scale IPSec VPN configuration large, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPN (DMVPN) Add services to IPSec VPNs, including voice and multicast Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs Among the many functions that networking technologies permit is the ability for organizations to easily and securely communicate with branch offices, mobile users, telecommuters, and business partners. VPN provides enhanced productivity, efficient and remote access to network resources, site-to-site connectivity, high security, and tremendous cost savings. IPSec VPN Design is the first book that presents a detailed examination of the design aspects of IPSec VPN protocols that enable secure communications. Part II discusses the design principles include IPSec VPN hub-and-spoke, full-mesh, and fault-tolerant design. This part of this book also shows you how to integrate IPSec VPNs with MPLS VPNs. IPSec VPN Design provides you with field-tested design and configuration advice to help you deploy a safe and effective VPN solution in any environment. Security book is part of the Cisco Press Networking Technology Series.