Cert-Ex CCNA - IP Sec Explained
IPSec (Internet Protocol Security) is a suite of protocols designed to secure communications over IP networks. It provides data confidentiality, integrity, and authentication, ensuring secure data transmission. Here's a breakdown of the key components: 1. Authentication Header (AH) Purpose: Provides data integrity, data origin authentication, and an optional replay protection service. How it works: Calculates a message authentication code (MAC) based on the entire IP packet (including the outer IP header). Appends the MAC to the packet. The recipient verifies the MAC to ensure data integrity and authenticity. Benefits: Ensures that data hasn't been tampered with during transit. Verifies the source of the data. Limitations: Doesn't provide data confidentiality (encryption). 2. Encapsulating Security Payload (ESP) Purpose: Provides data confidentiality (encryption), data integrity, and data origin authentication. How it works: Encrypts the entire IP packet (except for s...