Chapter 13: Remote Network Access

Site-to-Site VPN

, allow a company to connect its remote sites to the corporate backbone securely over an insecure public medium like the Internet instead of requiring more expensive wide area network (WAN) connections like Frame Relay

Client-to-Site VPN

allow remote users like telecommuters to securely access the corporate network wherever and whenever they need to.

Clientless VPN

enables end users to securely access resources on the corporate network from anywhere using an SSL/TLS enabled web browser

Split Tunnel vs. Full Tunnel

Determines whether all traffic goes through the VPN or only corporate traffic.

SSH (Secure Shell)

Secure command-line access to remote systems.

API (Application Programming Interface)

Allows programmatic control of remote systems.

Console Access

Direct access to network devices using a console cable.

Jump Box/Host

A hardened system used to securely manage devices in restricted network zones.

In-Band Management

Accessing network devices through the active network (e.g., SSH, RDP).

Out-of-Band Management

Managing devices through an alternative path (e.g., console port, separate management network)​