Can anyone sum up an ipsec VPN for an idiot? Someone asked me yesterday to email them how it works, including a bried explanation of public IP addresses, why we put a private IP in as a DNS server option and... basically explain the tunnel from end to end in simple terms, like;


LAPTOP (PUBLIC IP)    |>>>>>>>>>IPSEC TUNNEL>>>>>>>|    (PUBLIC IP) ROUTER  (PRIVATE IP)          |  (PRIVATE IP)  SERVER
     

I tried but my brain is melting.

site to site or client to site ?

client to site.

how much detail do you want - do you want to include SA, key exchange, encryption domains ?