

\documentclass{beamer}

%     Copyright (c)  2001,2002,2003,2004,2005  Alexandre Dulaunoy <adulau@foo.be>
%     Permission is granted to copy, distribute and/or modify this document
%     under the terms of the GNU General Public License, Version 2.0
%     or any later version published by the Free Software Foundation;


%\usetheme{PaloAlto}
\usetheme{Goettingen}
\usepackage[english]{babel}
\usepackage[latin1]{inputenc}
\setbeamertemplate{blocks}[rounded][shadow=true]
\setbeamercovered{transparent}


%
% The following info should normally be given in you main file:
%


\title{An Introduction to the Tunneling Protocols}
\subtitle {}
\keywords {tunneling protocols}
\subject {Overview of Tunneling Protocols - OpenVPN 2/2}
\author{Alexandre Dulaunoy and various}
\institute{
  ASBL CSRRT-LU (Computer Security Research and Response Team Luxembourg)\\
  http://www.csrrt.org/}


\begin{document}


\frame{\titlepage}

\section*{OpenVPN}

\subsection{Introduction}

\frame[containsverbatim]{
  \nameslide{OpenVPN - Introduction}
  \frametitle{OpenVPN - Introduction}
  
 \begin{itemize}
	\item OpenVPN is not an IETF standard but...
	\item provides an open tunneling protocol over a single UDP or TCP stream
	\item works over NAT and/or dynamics IP 
	\item provides only an ESP (IPsec terminology) like approach
	\item flexible authentication scheme (from static-key to X.509 certificate)
	\item TUN/TAP interface, works at user-level (versus kernel-level IPsec)
 \end{itemize}


}

\subsection{OpenVPN - mode of operation}

\frame[containsverbatim]{
  \nameslide{OpenVPN - mode of operation}
  \frametitle{OpenVPN - mode of operation}
  \begin{itemize}
    \item Authentication : secret key only or X.509 certification
    \item Mode : client or server or server-bridge
    \item Routing : client-to-client, server-to-client (default), iroute/route?
    \item Configuration : client-config (X.509), management interface, 
  \end{itemize}

}



\subsection{OpenVPN hands-on}

\frame[containsverbatim]{
  \nameslide{OpenVPN hands-on}
  \frametitle{OpenVPN hands-on}

  \begin{itemize}
		\item one client, one server (mixed OS or non-mixed OS)
		\item shared secret keys authentication
		\item use a secure channel to exchange the shared keys
  \end{itemize}
}


\subsection{OpenVPN hands-on}

\frame[containsverbatim]{
  \nameslide{OpenVPN hands-on}
  \frametitle{OpenVPN hands-on}

  \begin{itemize}
		\item one client, one server (mixed OS or non-mixed OS)
		\item X.509 authentication
		\item use a secure way to handle the key enrollment process
  \end{itemize}
}


\subsection{OpenVPN hands-on}

\frame[containsverbatim]{
  \nameslide{OpenVPN hands-on}
  \frametitle{OpenVPN hands-on}

  \begin{itemize}
		\item multiple clients (fixed IPs), one server
		\item X.509 authentication
		\item use a secure way to handle the key enrollment process
		\item routing for a dedicated network on the server
  \end{itemize}
}

\subsection{OpenVPN hands-on}

\frame[containsverbatim]{
  \nameslide{OpenVPN hands-on}
  \frametitle{OpenVPN hands-on}

  \begin{itemize}
		\item multiple clients (fixed IPs), one server
		\item X.509 authentication
		\item use a secure way to handle the key enrollment process
		\item routing for a dedicated network on the server
		\item client must reach another client using the server
  \end{itemize}
}


  

\section*{Q and A}

\frame {

\nameslide {Q and A}
 \frametitle {Q and A}

\begin{itemize}
\item Thanks for listening.
\item http://www.csrrt.org.lu/
\item adulau@foo.be
\end{itemize}
%%\includegraphics[scale=0.50]{Hack2005lu-banner.png}
}

\end{document}


