zation experiences congestion on its access circuits, it has the option of adding access lines or increasing the capacity of its existing access circuits. It can upgrade to Carrier Gigabit Ethernet from slower data rate megabit Ethernet. In addition to monitoring and upgrading access circuits, where possible, organizations lease Internet access from the same provider at all of their sites to limit the number of carriers from whom they get service. This is not possible in remote and international areas where the primary carrier does not provide coverage. ADDING SECURITY ON TRAFFIC SENT OVER IP VPNS Because the Internet is open to users from all over the world, organizations deploy security software designed to protect information from snoopers. Most security protocols on IP VPNs employ tunneling and encryption. Tunnels surround packets with bits that protect privacy on the packets, and encryption uses complex mathematical algorithms to scramble bits SO that only www.TechnicalPDF.com matching protocols at the receiving end of the transmission can unscramble (decrypt) the bits into readable formats. Virtual Private Networks have many of the features of private lines dedicated to single organizations, but they are not dedicated to single enterprises in a carrier's private network. They are sent over the Internet where they share capacity other data sent over the Internet. Security Protocols on Access to IP VPNs Security protocols designed for IP VPNs all create a tunnel for their transmission. Tunnels are special bits at the beginning and end of each packet. In essence, the tunnel encapsulates messages SO that others cannot see what is being transmitted. Tunneling protocols establish a secure connection between the corporate Local Area Network (LAN) and the remote user by encrypting and tunneling the bits and hiding the IP header in each packet. This ensures privacy. Tunneling prevents hackers from learning corporate LAN IP addresses. Specific protocols encrypt packets to further protect their privacy. Encryption is 