Bezpečné propojování sítí

Abstract

This master thesis deals with secure interconnecting of the computer networks by the help of virtual private networks based on IPsec protocols. In theoretical part, we can find specification of the IPsec suite with description of the security protocols, theirs modes and phases during establishing of the secure connection between networks. Below, there is a description of the configuration of the IPsec virtual private networks on four different devices. All of these devices are subjected to measurement of the maximal network bandwidth before and after establishment of the secure connection depending on used encryption algorithm. Last part of this thesis is dealing with design and configuration of the two chosen topologies. This part tests the interoperability between devices and also backup of the selected device by implementation of the dynamic routing protocol OSPF.