Network Attacks and Defenses

325

Chapter 9

Site-to-Site VPN Tunnel 

Implementation against 

Eavesdropping Attacks

9.1   Introduction

A customary requirement for any multi-site network imple-

mentation is to have private communication channels between

sites. The use of a dedicated leased line for the private con-

nection is an obvious choice. Despite its security and perfor-

mance advantages, this solution tends to be costly compared

to the use of the Internet Protocol Security Virtual Private

Network (IPsec VPN). The IPsec VPN is a private connec-

tion that provides a secure connection over a public or

shared medium such as the Internet between two Local Area

Networks (LANs) or a ...