Table of Contents
Advertisement
Platform Considerations
References
Copyright © 2010, Juniper Networks, Inc.
Table 8: IPSec Terms and Abbreviations (continued)
Term or
Abbreviation
Description
SA
Security association. The set of security parameters that dictate how IPSec
processes a packet, including encapsulation protocol and session keys. A single
secure tunnel uses multiple SAs.
Secure tunnel
A virtual connection between two security gateways used to exchange data
packets in a secure way. A secure tunnel is made up of a local SA and a remote
SA, where both are negotiated in the context of an ISAKMP SA.
SHA
Secure Hash Algorithm
SPI
Security parameter index
VPN
Virtual private network
For information about modules that support IPSec on ERX14xx models, ERX7xx models,
and the ERX310 Broadband Services Router:
See ERX Module Guide, Table 1, Module Combinations for detailed module specifications.
See ERX Module Guide, Appendix A, Module Protocol Support for information about the
modules that support IPSec.
NOTE: E120 and E320 Broadband Services Routers do not support configuration of
IPSec.
For information about IPSec, see the following RFCs:
RFC 768—User Datagram Protocol (August 1980)
RFC 2401—Security Architecture for the Internet Protocol (November 1998)
RFC 2402—IP Authentication Header (November 1998)
RFC 2403—The Use of HMAC-MD5-96 within ESP and AH (November 1998)
RFC 2404—The Use of HMAC-SHA-1-96 within ESP and AH (November 1998)
RFC 2405—The ESP DES-CBC Cipher Algorithm With Explicit IV (November 1998)
RFC 2406—IP Encapsulating Security Payload (ESP) (November 1998)
RFC 2407—The Internet IP Security Domain of Interpretation for ISAKMP (November
1998)
Chapter 5: Configuring IPSec
121
Advertisement
Table of Contents
