Avaya Configuring Integrated IP Security Manual de usuario descargar pdf (Pagina 34)

Configuring IP Security Services

2-10

304111-A Rev 00

IPsec Services

IPsec services consist of confidentiality, integrity, and authentication.

Confidentiality

Confidentiality is accomplished by encrypting and decrypting data packets. The

Encapsulating Security Payload (ESP) protocol uses the Data Encryption

Standard (DES) algorithm in cipher block chaining (CBC) mode to encrypt and

decrypt data packets.

You set confidentiality with the cipher algorithm and cipher key parameters. The

cipher algorithm and cipher key are specified in the SAs. The algorithm and key

must be identical on both ends of an IPsec connection.

Integrity

Integrity determines whether the data has been altered during transit. The ESP

protocol ensures that data has not been modified as it passes between the security

gateways. The ESP protocol uses the HMAC (RFC 2104) and MD5 (RFC 1321)

algorithms.

You set integrity with the integrity algorithm and integrity key parameters. The

integrity algorithm and integrity key must be identical on both ends of an IPsec

connection.

Authentication

Authentication ensures that data has been transmitted by the authorized source.

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 71 72

Sin comentarios

Avaya Configuring Integrated IP Security Manual de usuario Pagina 34