IPsec

v IPsec (Internet Protocol Security) is a framework for a set of protocols for security at the network or packet processing layer of network communication.
v Earlier security approaches have inserted security at the application layer of the communications model.
v IPsec is said to be especially useful for implementing virtual private networks and for remote user access through dial-up connection to private networks.
v A big advantage of IPsec is that security arrangements can be handled without requiring changes to individual user computers.
v Cisco has been a leader in proposing IPsec as a standard (or combination of standards and technologies) and has included support for it in its network routers.
v IPsec provides two choices of security service: Authentication Header (AH), which essentially allows authentication of the sender of data, and Encapsulating Security Payload (ESP), which supports both authentication of the sender and encryption of data as well.
v The specific information associated with each of these services is inserted into the packet in a header that follows the IP packet header.


 There are two modes of IPsec operation:
Transport mode
In transport mode, only the payload (the data you transfer) of the IP packet is encrypted and/or authenticated.
Tunnel mode
In tunnel mode, the entire IP packet (data and IP header) is encrypted and/or authenticated.

0 comments