Using a nested virtualization tool for teaching VPN fundamentals

Abstract

A common problem of undergraduate courses about security and computer networks is the difficulty of providing practical exercises to students. Although different approaches have been followed to solve this problem, it is still an open issue. In this work, we first discuss several possible open-source simulation/emulation/virtualization tools that could be used in the design of a lab session for teaching Virtual Private Networks (VPN) fundamentals based on OpenVPN. Next, we describe how a hands-on lab about VPNs can be carried out with the selected virtualization tool, called NETinVM. The proposed lab starts installing the OpenVPN packages in client and server machines, as in a real-case scenario. Although in this case both client and servers are Kernel-based Virtual Machines (KVM) connected to networks inside NETinVM. The nested virtualization included in NETinVM allows to deploy all the required types of VPNs within the virtual machine, allowing the students to reproduce the lab without the need of a network infrastructure, and following exactly the same process required in a real scenario. The evaluation results show that the level of learning achieved by the students through this lab session seems to be high, and they consider this lab useful for their professional development, showing that virtualization technology can help in computer network education.