VPN Technologies has been around for quite some time now. Broadly, this VPN Technology can be divided into 2 key VPN technologies namely.
Types of VPN Technology –
1)Site to Site VPN
2)Remote Access VPN
While Site to Site VPN uses a security method called IPsec to build an encrypted tunnel from one Customer network (generally HQ or DC) to the customer’s remote site between whole or part of a LAN on both sides, Remote access VPN connect individual users to Private Networks (usually HQ or DC).
Related – Top 100 VPN Interview Questions
Site to Site VPN has the benefit that each client machine does not require to perform encryption/decryption or install VPN Client software on it. On the other hand, the Remote Access VPN user machine needs to perform encryption/decryption and may or may not be required to be set up VPN Client software.
Below table can help you understand the difference between site to site VPN and remote access VPN.
Site to Site VPN vs Remote Access VPN –
| PARAMETER | SITE TO SITE VPN | REMOTE ACCESS VPN |
|---|---|---|
| Philosophy | Uses a security method called IPsec to build an encrypted tunnel from one Customer network (generally HQ or DC) to the customer's remote site between whole or part of a LAN on both sides. | Remote access VPN connect individual users to private networks (usually HQ or DC). |
| VPN Client on end devices | Not required to be setup on each Client | Every user may (Client VPN) or may not (Clientless) require to have own VPN client. |
| Tunnel Creation | Each users is not required to initiate to setup VPN tunnel | Each remote access user needs to initiate to form VPN tunnel |
| Target User | Office LAN Users of branch office need to connect to servers in HQ | Roaming users who want to access Corporate office resources/servers securely. employees who travel frequently |
| Encryption / Decryption | The VPN gateway is responsible for encapsulating and encrypting outbound traffic, sending it through a VPN tunnel over the internet to a peer VPN gateway at the target site | the VPN client software encapsulates and encrypts that traffic before sending it over the internet to the VPN gateway at the edge of the target network |
| Technologies Supported | IPSEC | IPSEC and SSL |
| Multiple User / VLAN traffic flow | Allows multiple users/VLANs traffic to flow through each VPN tunnel. | Does not allow multiple user traffic to pass through each VPN Tunnel. |
Download the difference table here.
Related –
hello Rashmi, my name is Christian Aguirre,
i am wondering if you have any template of a vpn client l2t ipsec vpn cisco, if you maybe want to share???
Hello Christian,
I tried looking for some helpful links related to vpn client configuration for l2tp over ipsec vpn. Hope this helps. Thanks
https://www.petenetlive.com/KB/Article/0000571
https://www.cisco.com/c/en/us/support/docs/ip/layer-two-tunnel-protocol-l2tp/200340-Configure-L2TP-Over-IPsec-Between-Window.html