Annex C22 Everything over Internet Protocol (Eoip) Flashcards
Dynamic Multi-Point Virtual Private Network (DMVPN)
DMVPN is a Cisco IOS Software solution for building IPSec VPNs in an easy and scalable manner. The DMVPN structure uses a centralized architecture to provide easier implementation and management for deployments of diverse user communities, including mobile workers, telecommuters, and extranet users in the civilian world. In the Marine Corps, we utilize Cisco DMVPN technology specifically in the deployment of Very Small Aperture Terminals (VSATs). DMVPN prevents the need for pre-configured static tunnels to add a new spoke. With DMVPN, tunnels can be created automatically on an as-needed basis and can be automatically “torn” down when they are no longer required. In Marine Corps VSAT networks, Cisco DMVPN allows spokes to communicate directly with each other over the WAN (reducing satellite hops) but doesn’t require a permanent VPN connection between sites (much like placing a VOIP call between two nodes without a direct Intercluster Trunk connection). It enables zero-touch deployment of IPSec tunnels and improves network performance by reducing latency and jitter, while optimizing hub bandwidth utilization.
Tunneling
tunnel is a virtual path across a network that delivers packets that are encapsulated and possibly encrypted to a designated distant end. A tunnel, essentially, is the process of encapsulating one protocol (the payload protocol) inside another (the delivery protocol). The payload and the delivery protocols can be and are often the same.
TUNNELING PROTOCOLS
There is a number of tunneling protocol standards. In the Marine Corps, we are primarily concerned with GRE, VTI, mGRE, and IPSec.
Black Core Routing
Black Core Routing is a networking scheme for the interconnection of core network components where all data remains IPSec encrypted (black traffic) as it is transported across the core. The term “Black Core” describes the black-to-black interconnection of core network components.
