For businesses, being able to communicate information from one branch to another is vital. Keeping this information within the company is just as important, which is why companies are investing in Virtual Private Networks (VPN) to create channels for co-workers to communicate by, without worrying about the average Internet user accessing their information. The traditional way of creating this channel would be either to create a set of leased lines, or use Internet Protocol Security (IPSec). In the leased line option, businesses would contact their local telephone companies and have a personal, individual line running from their one company to another installed. Branches would interact on this specific telephone line, which had no access to any body outside the company. The downside was that the initial cost would be high; it would also take a fair amount of time to set up the line, especially if the branches were in different countries, and additionally, the maintenance cost is also expensive.
In IPSec, a set of protocols (agreed upon format) is created and each company would support the right ones. Specific hardware and software is implemented to create a secure channel. Because the companies are using a public line to create the network, certain protocols are created to secure the exchange of information. This information (which is called a packet) is encrypted. In IPSec, there are two encryption modes: Transport and Tunnel.
Transport encrypts only the data portion, or what is also known as the "payload", but it leaves the header. Tunnel, which is a more secure, encrypts both the data and the header. The IPSec also incorporates another security system known as the Public Key. The Sender would use the Receiver's public key code to send the Receiver the information. The Receiver would then decrypt the information using his/her private key. This is known as an Asymmetric Encryption as there are two parts involved.
By using this method, it ensures a secure exchange of packets. The IPSec system was created by the Internet Engineering Task Force (IETF) and is part of the Packet Switching network system. Companies would still have to incorporate a firewall to prevent unauthorized access to and from the private network.
The speed of which the packets exchange is fairly slow, which is why companies are now updating to a system called Multi Protocol Label Switching (MPLS). This system operates on the Open System Interconnection (OSI) Model Layer (as does the IPSec). The OSI has 7 layers, which all these systems operate on. It is a network framework for implementing protocols, where control is passed from one layer to the next.
A Sender would have to go through these seven layers before the information gets send through, then, in order for the Receiver to receive the information, he/she would have to go through the same levels. The seven levels are as follows: Layer 7 - Application; at this stage the communication partners identify themselves through their server, user authenticate and privacy plus any other constraints. Layer 6 - Presentation; this level encrypts from the application to the network, transforming it so the network can accept it. This is also called the Syntax (spelling and grammar of programming language) Layer.
Layer 5 - Session; at this point, it establishes, manages, terminates and connects between the applications. Layer 4 - Transport; this is where the data is transferred. Layer 3 - Network; switching and routing technologies transmit the data from one node (processing location i.e.: Computer or Printer) to another node. This is also when the packet sequence comes into play. Layer 2 - Data link; packets are encoded and decoded into bits. There are two sub layers, which are Media Access Control (MAC) and Logical Link Control (LLC). Link 1 -Physical; where the information is finally conveyed through the physical wires, only to connect to another Layer 1 on the other side. It then passes back from Layer 1 to 7 to the receiver.
The MPSL uses a labeling system, where the packets are labeled by the Label Edge Routers, with their destination address, their source address as well as other information. This enables the packet to skip some of the layers in the OSI model, causing the exchange to be more efficient and effective. The MPLS also places outgoing labels on the packets, by corresponding with the Label Switch Paths (LSP). This diverts and routes traffic based on the data stream type and Internet access, causing more control for your Internet service provider to manage the interaction between your companies.
The benefits of using MPLS are simply speed and more control, which is vital in the World Wide Web. Firewalls are also put in place for extra security but overall the MPLS is fast becoming the mode of transport for packet switching between companies as it is proving to be one of the more secure ways of keeping information within the business.
This article looks into the different options of Virtual Private Networking for businesses and what makes MPLS stand out from the rest.