Network › Module 9 › Lesson 1
VPN Types Without Magic
A VPN is a tunnel plus a trust story — not invisibility. then YOUR adapters.
Visual · vpn_types_no_magic
VPN types without magic: tunnel, identity, endpoint. Original Cyberlium.
Opening
A VPN is not a cloak. It is an encrypted path to an endpoint that still has logs, law, and bugs.
Marketing says “become invisible.” Engineering says: your machine authenticates to a VPN concentrator (or a mesh peer), then sends packets through a tunnel. The endpoint sees your traffic. The apps you reach may still see you. Split-tunnel vs full-tunnel changes what goes into that pipe. None of this is magic, and none of it is a substitute for SSH key hygiene or for “I can nmap the office now.” Original Cyberlium.
1. Remote-access, site-to-site, and mesh — different jobs
Remote-access VPN: a user/device authenticates and gets a tunnel to an organization or a consumer provider. Site-to-site: two networks you administer agree to forward through a tunnel. Mesh (WireGuard-style peers you set up) still has identities and allowed IPs — it is not “the internet went away.”
Consumer “privacy VPN” products are remote-access to a vendor. You inherit their jurisdiction, logging story, and exit nodes. Cyberlium will not rank brands. It will insist you stop believing in invisibility.
2. Look at adapters on THIS host, do not hunt a concentrator
ipconfig / ifconfig / Get-NetAdapter can show tunnel adapters when a VPN you use is up. That is inventory. It is not a scan of 10.0.0.0/8 inside someone else's overlay. If you are not authorized to be on that overlay, disconnect.
A home router admin page is still not your VPN lab if GATE said STOP.
Command guide
Look at adapters on THIS host, do not hunt a concentrator
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap sudo apt install python3
Built-in (iproute2)
macOS:
Command — copy this
brew install nmap brew install python3
Use: ifconfig
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
Download https://python.org/downloads/ Use: ipconfig
═══ COMMANDS ═══
Command — copy this
powershell.exe -NoProfile -Command "Get-NetAdapter | Select-Object Name,Status,MacAddress,InterfaceDescription | Format-Table -AutoSize" || ip -br addr || ifconfig || ipconfig
python3 -c "print('VPN endpoint can still log; apps can still see you; split-tunnel leaks local paths')"3. What a VPN does not forgive
A tunnel does not make hydra OK. It does not make 0.0.0.0 binds OK. It does not make Topic 11's ARP/DNS ethics expire. If the far end is an employer, their policy still binds you.
Write: tunnel + identity + endpoint. Then we talk SSH, which is often how admins actually log into boxes they own.
4. What you ship: VPN as tunnel+identity+endpoint, not a cloak
Jobs CSV. Inventory THIS host's adapters. No hydra, no overlay nmap, no stolen profiles. DEMO GATE holds. for teaching.
5. What you record before the next lesson
t11-m09-vpn-jobs.csv. DEMO identified/STOP. NEVER hydra/nmap/0.0.0.0. Next: SSH Keys vs Passwords.
6. Wrong vs right: stranger networks vs literacy on systems you own
Worked failure — same network word, opposite target. Right never needs a café or campus LAN.
Wrong
nmap the corporate 10/8 because the VPN “hides you.” hydra AnyConnect. Export a coworker’s.ovpn from a shared PC “as a lab.”
Right
Name the jobs. List YOUR adapters. Leave other people's tunnels alone. Next: SSH Keys vs Passwords.
Mission: un-magic the VPN
1) / STOP if router. 2) Write remote-access vs site-to-site vs mesh in cyberlium-lab. 3) List THIS host's adapters. Do not scan a VPN overlay. Do not hydra.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor what split-tunnel means on a laptop you own — not how to bypass a company VPN policy.
Knowledge Check
APPLY: A consumer VPN ad says you become untraceable. Cyberlium says:
Multiple choice
Knowledge Check
APPLY: True or False: Site-to-site VPN means any student may route through a company tunnel they found on GitHub.
True or False
Knowledge Check
APPLY: curl http://192.168.0.1/ is Router Admin. VPN homework?
Multiple choice