VPN for beginners – Advanced topics PART 2

Explore how certificates, pki, and https secure connections, explain trusted versus untrusted authorities, and demonstrate issues with self-signed and demo certificates in a lab setup.

issue a server certificate for a server using RSA public and private keys, upload the certificate, and save the private key. trust the certificate authority in your browser.

Deploy a secure IKEv2 vpn with certificates and eap-chap v2, configure the Windows native client to connect to the SANS firewall, and maintain standard phase one and two encryption concepts.

this lab demonstrates configuring ikev2 ipsec vpn with firewall certificates, enabling a mobile client, defining a client ip pool, and validating phase one and phase two on windows 11.

OpenVPN guides certificate-based security with a CA, firewall integration, and user creation, then tests the Windows config package and optional OTP MFA via Google authenticator for stronger access.

Learn how to implement one-time passwords with Google Authenticator in OpenVPN using FreeRADIUS, configuring RADIUS servers, clients, and authentication flow for secure VPN access.

Enable one time passwords with Google Authenticator to implement multi-factor authentication, using a phone app to scan a code and enter the six-digit code that changes every 20 seconds.

Set up a SoftEther IPsec / SSL VPN server on Windows 11 and connect with a Windows 10 client, demonstrating a free, easy, remote access VPN lab with secure SHA-384.

Learn to configure Windows Server 2019 IPsec IKEv1 VPN server with PSK, using PowerShell to enable remote access, routing, and an IP address pool for clients, via built-in Windows client.

Configure your OpenVPN server in the cloud and authenticate with public and private keys. Connect with a preconfigured client and verify two simultaneous connections are encrypted through the cloud VPN.

Learn how to set up a pfSense appliance hardware firewall, with four ports, WAN and LAN, customizable RAM/SSD and open source BIOS, plus bootable USB installation in minutes.

Learn to create a bootable USB with Rufus to install pfSense, choosing between console and VGA installation, and preparing the USB stick.

Master console connections by using a console cable to boot pfSense, install it, configure two NICs for WAN and LAN, and access 192.168.1.1 for setup.

Explore zero trust networks as a secure alternative to vpn tunnels, enabling precise access control without open ports, through Twin Gate, including free options and Windows 10 deployment.

Explore zero trust networking, where access requires authentication and no device is exposed, using quic and tls with peer-to-peer tunnels for secure, easy deployment.

Explore hub-and-spoke vpn architectures with twin gate and Windows 10 as server. Examine zero-trust access, DNS over HTTPS, and GraphQL and Terraform tooling.

Configure two network interface cards, assign static IP addresses to the LAN and WAN, then secure the lab firewall by changing the password and testing connectivity with 8.8.8.8.

Set up pfSense, open source firewall, in a VirtualBox lab with two network adapters to act as edge device between LAN and WAN, and continue installation in the next lecture.

Configure and verify a site-to-site ipsec vpn lab on an ACS router with a remote Cisco gateway, defining local and remote subnets and phase one and two.

Master security principles like authentication, authorization, and accounting, with MFA, Tacacs, and logging; examine attack vectors—from viruses to social engineering, keyloggers, spoofing, and physical access risks.