v
IPsec
(Internet Protocol Security) is a framework for a set of protocols for security
at the network or packet processing layer of network communication.
v
Earlier
security approaches have inserted security at the application layer of the communications
model.
v
IPsec
is said to be especially useful for implementing virtual private networks and
for remote user access through dial-up connection to private networks.
v
A
big advantage of IPsec is that security arrangements can be handled without
requiring changes to individual user computers.
v
Cisco
has been a leader in proposing IPsec as a standard (or combination of standards
and technologies) and has included support for it in its network routers.
v
IPsec
provides two choices of security service: Authentication Header (AH), which essentially
allows authentication of the sender of data, and Encapsulating Security Payload
(ESP), which supports both authentication of the sender and encryption of data as
well.
v
The
specific information associated with each of these services is inserted into
the packet in a header that follows the IP packet header.
There are two modes of IPsec operation:
Transport mode
In transport
mode, only the payload (the data you transfer) of the IP packet is encrypted and/or
authenticated.
Tunnel mode
In tunnel mode, the
entire IP packet (data and IP header) is encrypted and/or authenticated.
0 comments