O'Reilly logo

CCSP SNAA Quick Reference by Ryan Lindfield

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 3. IPsec VPNs

Essential Terminology

Simply put, IPsec is a framework for providing reliable and secure communication between hosts. This additional protection is provided at the IP layer of the OSI model. IPsec is based on Internet Key Exchange (IKE), Authentication Header (AH), and Encapsulating Security Payload (ESP). These protocols work together to provide secure tunnels between a pair of hosts that are IPsec capable. The list of potential hosts includes but is not limited to firewalls, VPN concentrators, routers, cellular phones, PDAs, workstations, laptops, and servers. Let’s examine each of these protocols individually.

Internet Key Exchange (IKE)

Handles the negotiation of security associations (SAs).

Communications occur using ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required