Configuring Ipsec Network Security - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Configuring IPsec Network Security

IP security (IPsec) protocol is a framework of open standards that provides data confidentiality, data
integrity, and data authentication between participating peers. It is developed by the Internet Engineering
Task Force (IETF). IPsec provides security services at the IP layer, including protecting one or more data
flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a
host. The overall IPsec implementation is the latest version of RFC 2401. Cisco NX-OS IPsec
implements RFC 2402 through RFC 2410.
IPsec uses the Internet Key Exchange (IKE) protocol to handle protocol and algorithm negotiation and
to generate the encryption and authentication keys used by IPsec. While IKE can be used with other
protocols, its initial implementation is with the IPsec protocol. IKE provides authentication of the IPsec
peers, negotiates IPsec security associations, and establishes IPsec keys. IKE uses RFCs 2408, 2409,
2410, and 2412, and additionally implements the draft-ietf-ipsec-ikev2-16.txt draft.
The term IPsec is sometimes used to describe the entire protocol of IPsec data services and IKE security
Note
protocols and is other times used to describe only the data services.
This chapter includes the following sections:
About IPsec, page 44-2
•
About IKE, page 44-3
•
IPsec Prerequisites, page 44-3
•
Using IPsec, page 44-4
•
IPsec Digital Certificate Support, page 44-7
•
Configuring IPsec Using FCIP Wizard, page 44-10
•
Manually Configuring IPsec and IKE, page 44-13
•
Optional IKE Parameter Configuration, page 44-16
•
Crypto IPv4-ACLs, page 44-21
•
IPsec Maintenance, page 44-37
•
• Global Lifetime Values, page 44-37
• Default Settings, page 44-39
OL-17256-03, Cisco MDS NX-OS Release 4.x
C H A P T E R
Cisco MDS 9000 Family Fabric Manager Configuration Guide
44
44-1