Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 146

JunosE 11.3.x IP Services Configuration Guide
120
Table 8: IPSec Terms and Abbreviations (continued)
Term or
Abbreviation Description
CA Certificate authority
DES Data Encryption Standard encryption algorithm
DPD Dead peer detection, which enables router to detect when communication to
remote peer has been disconnected. Also known as IKE keepalive.
DSS Digital Signature Standard authentication algorithm
ESP Encapsulating Security Payload, which provides data integrity, data
confidentiality and, optionally, sender's authentication
FQDN Fully qualified domain name, which consists of the hostname and domain
name for a specific system
HMAC Hashed Message Authentication Code
IKE Internet Key Exchange
IKE endpoint IP address of the entity that is one of two endpoints in an IKE/ISAKMP SA.
Inbound traffic In the context of a secure interface, already secured traffic arriving on that
interface (identified based on its SPI). This traffic is cleared and checked
against the security parameters set for that interface.
IPSec Internet Protocol Security
IPSec endpoint IP address of the entity that is one of two endpoints in an IPSec SA
ISAKMP Internet Security Association and Key Management Protocol
ISAKMP SA Security associations used to secure control channels between security
gateways. These are negotiated via IKE phase 1.
MDx Message Digest hash algorithm
Nonce A random value used to detect and protect against replay attacks
Outbound In the context of a secure interface, the clear traffic forwarded to the interface
traffic (either by policy or by routing) that is typically secured according to security
parameters set for that interface.
PFS Perfect forward secrecy
RSA Rivest-Shamir-Adleman encryption algorithm
Copyright © 2010, Juniper Networks, Inc.