دانلود کتاب MPLS VPN security: [a practical guide to hardening MPLS networks]

فهرست مطالب :

Cover......Page 1
Contents......Page 11
Foreword......Page 18
Introduction......Page 21
Part I: MPLS VPN and Security Fundamentals......Page 24
Key Security Concepts......Page 26
Other Important Security Concepts......Page 32
Overview of VPN Technologies......Page 33
Fundamentals of MPLS VPNs......Page 36
A Security Reference Model for MPLS VPNs......Page 43
Summary......Page 45
Threats Against a VPN......Page 48
Threats Against an Extranet Site......Page 52
Threats Against the Core......Page 53
Threats Against the Internet......Page 61
Threats from Within a Zone of Trust......Page 62
Reconnaissance Attacks......Page 63
Summary......Page 64
Part II: Advanced MPLS VPN Security Issues......Page 66
VPN Separation......Page 68
Robustness Against Attacks......Page 73
Hiding the Core Infrastructure......Page 76
Protection Against Spoofing......Page 79
Specific Inter-AS Considerations......Page 80
Specific Carrier’s Carrier Considerations......Page 90
Security Issues Not Addressed by the MPLS Architecture......Page 93
Comparison to ATM/FR Security......Page 94
Summary......Page 97
Internet Access......Page 100
Extranet Access......Page 117
MPLS VPNs and Firewalling......Page 121
Designing DoS-Resistant Networks......Page 125
Inter-AS Recommendations and Traversing Multiple Provider Trust Model Issues......Page 135
Carriers’ Carrier......Page 149
Layer 2 Security Considerations......Page 151
Multicast VPN Security......Page 153
Summary......Page 154
Chapter 5 Security Recommendations......Page 156
General Router Security......Page 157
CE-Specific Router Security and Topology Design Considerations......Page 178
PE-Specific Router Security......Page 182
PE-CE Connectivity Security Issues......Page 183
Securing the Core......Page 184
Routing Security......Page 193
CE-PE Routing Security Best Practices......Page 199
Internet Access......Page 206
Sharing End-to-End Resources......Page 207
LAN Security Issues......Page 208
IPsec: CE to CE......Page 209
MPLS over IP Operational Considerations: L2TPv3......Page 210
Securing Core and Routing Check List......Page 213
Summary......Page 214
Part III: Practical Guidelines to MPLS VPN Security......Page 216
IPsec Overview......Page 218
Location of the IPsec Termination Points......Page 221
Deploying IPsec on MPLS......Page 227
Using Other Encryption Techniques......Page 228
Summary......Page 229
Generic Layer 2 Security Considerations......Page 232
C2 Ethernet Topologies......Page 233
C3 VPLS Overview......Page 235
C5 VPLS and VPWS Service Summary and Metro Ethernet Architecture Overview......Page 236
C6 VPLS and VPWS Security Overview......Page 238
Customer Edge......Page 242
Summary......Page 252
Management Network Security......Page 254
Securely Managing CE Devices......Page 255
Securely Managing the Core Network......Page 260
Summary......Page 262
Part IV: Case Studies and Appendixes......Page 264
Internet Access......Page 266
Multi-Lite VRF Mechanisms......Page 282
Layer 2 LAN Access......Page 285
Summary......Page 286
Appendix A: Detailed Configuration Example for a PE......Page 288
Appendix B: Reference List......Page 296
C......Page 300
D......Page 301
G......Page 302
I......Page 303
M......Page 304
R......Page 305
S......Page 306
W–Z......Page 307