virtual private network


Also found in: Dictionary, Thesaurus, Medical, Financial, Acronyms, Wikipedia.

virtual private network

[¦vər·chə·wəl ‚prī·vət ′net‚wərk]
(communications)
A wide-area network whose links are provided by a common carrier although they appear to the users to behave like dedicated lines, and whose computers use a common cryptographic key to send messages from one computer in the network to another. Abbreviated VPN.

Virtual Private Network

(networking, security)
(VPN) The use of encryption in the lower protocol layers to provide a secure connection through an otherwise insecure network, typically the Internet. VPNs are generally cheaper than real private networks using private lines but rely on having the same encryption system at both ends. The encryption may be performed by firewall software or possibly by routers.

Link-level (layer 2 and 3) encryption provides extra protection by encrypting all of each datagram except the link-level information. This prevents a listener from obtaining information about network structure. While link-level encryption prevents traffic analysis (a form of attack), it must encrypt/decrypt on every hop and every path.

Protocol-level encryption (layer 3 and 4) encryption encrypts protocol data but leaves protocol and link headers clear. While protocol-level encryption requires you to encrypt/decrypt data only once, and it encrypts/decrypts only those sessions that need it, headers are sent as clear text, allowing traffic analysis.

Application (layer 5 up) encryption is based on a particular application and requires that the application be modified to incorporate encryption.

Cisco.

virtual private network

A private network configured within a public network such as the Internet or a carrier's network. Years ago, virtual private networks (VPNs) obsoleted private lines between company branches. Using data encryption to maintain privacy, VPNs also allow mobile users access to the company LAN.

In the past, common carriers used their vast networks to "tunnel" traffic between customer locations to give the appearance of a private network while sharing backbone trunks, no different than the way the Internet works. Prior to the Internet's IP protocol, VPNs were built over X.25, Switched 56, frame relay and ATM technologies. See PVC, SVC, computer security and information security.

Internet VPNs
Internet VPNs are very popular, and several security protocols are used. IPsec, L2TP and PPTP provide secure tunnels over the Internet. For brief transactions at a website, SSL is widely used. See IPsec, L2TP, PPTP and SSL.

Virtual IP VPNs from Carriers
A "virtual private routed network" (VPRN) connects the customer's IP router to the provider's IP router. See MPLS.

Ethernet VPNs from Carriers
Carriers encapsulate Ethernet frames in one location and deliver them to another. Connecting two Ethernets is a "LAN interconnect service," while multipoint connectivity is a "transparent LAN service" (TLS). A "virtual private LAN service" (VPLS) is a multipoint VPN using an IP/MPLS core to route traffic. See TLS, VPLS and IP/MPLS core.

Frame Relay VPNs from Carriers
Carriers have offered frame relay point-to-point and multipoint VPNs, whereby the customer's equipment converts internal IP packets to frame relay packets. Adding a location in such a network means provisioning virtual circuits from the new site to all the other sites. See frame relay.
References in periodicals archive ?
The company offers businesses a broad range of Internet services, including Web hosting, dedicated access, virtual private networks, and managed service offerings, among other enhanced services.
Nokia Internet security and virtual private network appliances span the spectrum of price/performance points, and secure the widest range of network environments-from the smallest branch office to the largest Internet data center.
In terms of addressing security over the Internet, virtual private networks have emerged as a cost-effective piece to the modern telecommuting puzzle.
The government of the state of Tlaxcala also plans to migrate all of its offices to the Nortel Networks IP solution in the near future, implementing new services such as contact centers, virtual private networks (VPNs) and mobile IP applications.
Westcon Group has particular expertise in the convergence of voice, data and video applications and technologies, including voice-over Internet protocol, or VoIP, security for networking and communications systems, remote access, Internet and e-business, virtual private networks, videoconferencing and wireless connectivity.

Full browser ?