Internet Protocol Security (Ipsec) - Dell C9000 Series Networking Configuration Manual

Hide thumbs Also See for C9000 Series:

Table of Contents

Internet Protocol Security (IPSec)

Internet protocol security (IPSec) is an end-to-end security scheme for protecting IP communications by

authenticating and encrypting all packets in a communication session.

Use IPSec between hosts, between gateways, or between hosts and gateways.

IPSec is compatible with Telnet and FTP protocols. It supports two operational modes: Transport and Tunnel.

Transport mode — (default) Use to encrypt only the payload of the packet. Routing information is

Tunnel mode — Use to encrypt the entire packet including the routing information of the IP header.

Typically used when creating virtual private networks (VPNs).

Due to performance limitations on the control processor, You cannot enable IPSec on all packets

in a communication session.

IPSec uses the following protocols:

Authentication Headers (AH) — Disconnected integrity and origin authentication for IP packets

Encapsulating Security (ESP) — Confidentiality, authentication, and data integrity for IP packets

Security Associations (SA) — Necessary algorithmic parameters for AH and ESP functionality

IPSec supports the following authentication and encryption algorithms:

Authentication only:

Encryption only:

ESP Authentication and Encryption:

Internet Protocol Security (IPSec)