Ip Security (Ipsec); Technical Specifications; Basic Ipsec Connection Settings - Option Audio GlobeSurfer 3G Reference Manual

6.14 IP Security (IPsec)

IPsec is a series of guidelines for the protection of Internet Protocol (IP) commu-
nications. It specifies procedures for securing private information transmitted
over public networks. The IPsec protocols include:
• AH (Authentication Header) provides packet-level authentication.
• ESP (Encapsulating Security Payload) provides encryption and authenti-
cation.
• IKE (Internet Key Exchange) negotiates connection parameters, includ-
ing keys, for the other two services.
Services supported by the IPsec protocols (AH, ESP) include confidentiality
(encryption), authenticity (proof of sender), integrity (detection of data tamper-
ing), and replay protection (defense against unauthorized resending of data).
IPsec also specifies methodologies for key management. Internet Key Exchange
(IKE), the IPsec key management protocol, defines a series of steps to establish
keys for encrypting and decrypting information; it defines a common language
on which communications between two parties is based. Developed by the In-
ternet Engineering Task Force (IETF), IPsec and IKE together standardize the
way data protection is performed, thus making it possible for security systems
developed by different vendors to interoperate.
6.14.1 Technical Specifications
• Security architecture for the Internet Protocol
• IP Security Document Roadmap
• Connection type: Tunnel, Transport
• Key management: Manual, Automatic, Internet Key Exchange
• Gateway authentication: X.509, RSA signatures, pre-shared secret key,
ISAKMP (manual and aggressive modes)
• IP protocols: ESP, AH
• Encryption: AES, 3DES, DES, HW encryption integration
• Authentication: MD5, SHA-1
• IP Payload compression
• Interoperability: Windows 2000, FreeS/WAN, OpenBSD, FreeBSD, Cisco
Routers, Nortel, Windows NT, Checkpoint Firewall-1, F-Secure VPN for
Windows, Xedia Access Point/QVPN, PGP 6.5 Mac and Windows IPsec
Client, PGPnet, IRE Safenet/Intel LANrover, Sun Solaris, NetScreen

6.14.2 Basic IPsec Connection Settings

Click the IPsec icon from the Advanced screen to access the IPsec settings screen
(see figure 6.43).
172