CCNA 3 - Capitulo 8.4

CCNA 3 - Capitulo 8.4

1. VPN - VIRTUAL PRIVATE NETWORK

   • IPSEC PROTOCOL ENCAPSULATION
     • AH - AUTHENTIC HEADER
       • AUTHENTICATION THE LAYER 3 PACKET
       • APPROPRIATE ONLY CONFIDENTIALY IS NOT REQUIRED OR PERMITTED
       • PROVIDES AUTHENTICATION AND INTEGRITY
       • ALL TEXT IN TRANPORTED YNECRYPTED
     • ESP - ENCAPSULATION SECURITY PROTOCOL
       • ENCRYPTS THE LAYER 3
       • MODE TRANSPORT
         • HEADER IPV4 IS NOT ALTERED
       • MODE TUNNEL
         • ORIGINAL PACKET ENTIRE PACKET (ENCAPSULATED AND ENCRYPTED )
     • AH + ESP RARELY USED AS THE COMBINATION BECAUSE NOT SUCESSFULLY TRAVERSE NAT DEVICE
     • THE CHOICE OF AH OR ESP EABLISHES WHICH OTHER BUILDING BLOCKS ARE AVAILABLE
   • SECURITY ASSOCIATIONS (SA)
     • BASIC BUILDING BLOCK OF IPSEC
     • NEGOTIATE KEY EXCHANGE PARAMETERS
     • ESTABLISH A SHARED KEY
     • AUTHENTICATE EACH OTHER
     • DEFINE ENCRYPTION PARAMETERS
   • IPSEC IS AN IETF STANDARD (RFC 2401-2412)
     • PROVIDE CONFIDENTIALITY AND AUTHENTICATION
     • IPSEC CAN PROTECT LAYER 4 THROUGH LAYER 7
     • IPSEC PROTECT AND AUTHENTICATES IP BETWEEN SOURCE AND DESTINATION
     • DEFINES HOW A VPN CAN BE SECURE ACROSS IP NETWORK