In this tutorial, we will use pptp as protocol to connect to VPN server using a username and password, with 128 bit MPPE encryption. Variable as below: OS: CentOS 6 64bit VPN server: 209.85.227.89 VPN client IP: 209.85.227.90 - 209.85.227.100 VPN username: vpnuser Password: ourVPN#99 1. Install ppp via yum: $ yum install ppp -y 2. Download and install pptpd (the daemon for point-to-point tunneling). You can find the correct package at this websitehttp://poptop.sourceforge.net/yum/stable/packages/ : $ cd /usr/local/src $ wget http://poptop.sourceforge.net/yum/stable/packages/pptpd-1.3.4-2.el6.x86_64.rpm $ rpm -Uhv pptpd-1.3.4-2.el6.x86_64.rpm 3. Once installed, open /etc/pptpd.conf using text editor and add following line: localip 209.85.227.89 remoteip 209.85.227.90-100 4. Open /etc/ppp/options.pptpd and add DNS resolver value: ms-dns 8.8.8.8 5. Lets create user to access the VPN server. Open /etc/ppp/chap-secretsand add the user as below: vpnuser pptpd ourVPN#99 * The format is: [username] [space] [server] [space] [password] [space][IP addresses] 6. We need to allow IP packet forwarding for this server. Open/etc/sysctl.conf via text editor and change line below: net.ipv4.ip_forward = 1 7. Run following command to take effect on the changes: $ sysctl -p 8. Allow IP masquerading in IPtables: $ iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE 9. Turn on the pptpd service at startup and reboot the server: $ chkconfig pptpd on $ init 6
Vpn
There are several advantages associated with broadband VPN. These include: Bonding DSL – one of the main advantages of using a broadband VPN through Managed Communications is the ability to bond ADSL at multiple office locations to deliver a point to point connection. This broadband VPN solution offers resilience as well as increased broadband capacity for downloading at both sites. Reduced cost of internet breakout – another advantage of a broadband VPN is that it cuts the cost of internet breakout. Typically, a point to point leased line requires at least one additional internet connection. If the network contains many sites, internet breakout can become very expensive. If traffic is backhauled over leased lines to save costs on internet access, you need to route that traffic through the point to point link. This reduces the available bandwidth for other applications. With a broadband VPN, you can manage internet breakout cost effectively on a site by site basis without reducing available bandwidth for applications. Get an excellent service level agreement (SLA) – with an ADSL VPN from Managed Communications, you get a private network and negate the need for leased line internet breakout. But importantly you also get a 99.9% SLA so you can be totally confident about the level you will receive. Get expert advice and keep track of the latest technological breakthroughs – our engineers are experts in Cisco VPN, Checkpoint VPN and Netscreen VPN hardware. And with their years of knowledge and experience in the field, you know that you will be getting the best possible outcome for your business. Nobody knows more about VPN networks than Managed Communications.
Reliable Network A high degree of reliability in the core network is achieved through a redundant network configuration using dual nodes and duplicated lines. Arcstar Global IP-VPN covers 159 countries and regions, with original IP-VPN nodes in the major cities all over the world especially in the Asia-Pacific region. *includes countries/regions with IPSec access. Features & Benefits Flexibility & Scalability with various access methods and port speeds Ease of Management via “Plug & Play” configuration Security & Reliability with redundancy in transmission routes and node equipment in addition to a variety of backup options for access lines Cost Efficiency of shared network infrastructure and per-port charge structure that eliminates PVC charges Service Consistency with SLAs for service availability, performance, delivery, restoration, and fault notification time Quality of Service (QoS) to support real-time and mission-critical application Global coverage with native nodes in major US, Asia-Pacific and European cities 24 ⁄ 7 monitoring and operation Outstanding Cost Performance CPE Management Services Arcstar Global IP-VPN provides CPE (Customer Premises Equipment) management service covering router rental, design and installation of router, and off-site and on-site maintenance. Therefore, Arcstar Global IP-VPN allows you to reduce your total network management cost, leading you to concentrate more on your core business activities.
New cloud services are a major opportunity for service providers, but they also have created new testing challenges, according to test vendor Spirent Communications plc (NYSE: SPM; London: SPT). Spirent recently landed a contract with Chunghwa Telecom Laboratories , the research and development arm of Chunghwa Telecom Co. Ltd. (NYSE: CHT), to validate its cloud computing environment, and is actively promoting its test capabilities for the cloud. The test equipment is used to create conditions in the lab that exist in the real world, such as Internet-based attacks, and to validate what Spirent calls the PASS of cloud environments: performance, availability, security, and scalability. Service providers hoping to sell cloud-based services to enterprises must be able to prove the security of those services in the virtual environment, says Ankur Chadda, senior product marketing manager for application and security at Spirent. “In a multi-tenant situation, the service provider has to make sure there is not a proliferation of traffic between two virtually hosted services, which are just on a single physical infrastructure,” Chadda says. Service providers will have to offer Service Level Agreements (SLAs) that guarantee the protection of data, and to do that, they will have to be able to test the virtual environment end to end, from where the content or data enters the cloud to where it is delivered. “You also have new things in the cloud environment that you didn’t have in the past — for instance, if you are moving a service from one infrastructure location to another, what is the impact of that and how do security policies get mapped?” Chadda says. What Spirent is providing to Chungwa Telecom is the ability to test the performance of its cloud environment in a lab setting to determine how it will perform and how security is impacted, in the case of a major denial-of-service attack or other security threat, for example. Spirent also can test Secure Socket Layer (SSL) and IP Sec–based traffic and virtual firewalls. “In the testing environment, we don’t necessarily look just at the attack; it is also important to look at how your performance was impacted for the secure traffic,” Chadda says. “Even if you stop the attack, if the network performance takes a huge hit, your security solution might not be good enough.”
Think your IP VPN bills are too high? Then don’t move to Jakarta, Indonesia, home of one of the world’s most expensive 2 Mbit/s E-1 VPN ports, priced at over $11,300 per month Yes, IP VPNs have become a staple within multinational corporations, proving a secure tunnel into the company headquarters from remote offices and locations around the world. But their popularity doesn’t make them a commodity. Now, wanna hear something really sick? You can get the same VPN service in Jakarta, via a different carrier, with the same bandwidth, for a mere $1,347 a month. The difference in price has to do, of course, with where the connection is headed. “The foundation of price discrepancy has to do with bandwidth pricing in and out of the country,” says Greg Bryan, pricing research analyst with Telegeography. “If it’s a country that isn’t deregulated yet where bandwidth is difficult to acquire, that adds to the cost.” So the ports are the same and the technology is the same, but the price of bandwidth coming in and out of the country is not. That’s why in places such as Indonesia, you find such a wide range of prices — the most expensive ones are linking single locations within that area back to a more competitive western market. The cheap ones are only linking within Indonesia. Compare that to IP VPNs in New York which consistently cost around $1,000 a month whether they link in or out of the country. There is ample bandwidth coming in and out of the city which makes proving an IP VPN a relative cinch. Another factor in pricing discrepancy is service level agreements (SLAs). All enterprise customers want strong SLAs and providing service guarantees between remote countries is expensive. In New York or London, cities with widely developed infrastructure and an abundance of carrier hotel facilities, a VPN that connects locations within the city will likely cost the same as one that connects elsewhere in the world. And that cost will be relatively cheap in the area of $1,000 a month.
