SECUR Exam Cram™ 2 (Exam 642-501)

Chapter 8. Understanding IPSec VPNs on Cisco Routers

Terms you'll need to understand:

• Ciphertext

• Confidentiality

• Integrity

• Origin authentication

• Hashing

• Encryption

• Hash Message Authentication Code (HMAC)

• Digital signature

• Digital certificate

Techniques you'll need to master:

• Defining interesting traffic

• Defining Internet Key Exchange (IKE) Phase 1

• Defining IKE Phase 2

• Generating Rivest, Shamir, and Adleman (RSA) key pairs

• Enrolling with a certificate authority (CA)

• Defining IP Security (IPSec) peers

• Using the Simple Certificate Enrollment Protocol (SCEP)