Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual page 909

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Configuring IPsec Network Security
IP security (IPsec) protocol is a framework of open standards that provides data confidentiality, data
integrity, and data authentication between participating peers. It is developed by the Internet Engineering
Task Force (IETF). IPsec provides security services at the IP layer, including protecting one or more data
flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a
host. The overall IPsec implementation is the latest version of RFC 2401. Cisco NX-OS IPsec
implements RFC 2402 through RFC 2410.
IPsec uses the Internet Key Exchange (IKE) protocol to handle protocol and algorithm negotiation and
to generate the encryption and authentication keys used by IPsec. While IKE can be used with other
protocols, its initial implementation is with the IPsec protocol. IKE provides authentication of the IPsec
peers, negotiates IPsec security associations, and establishes IPsec keys. IKE uses RFCs 2408, 2409,
2410, and 2412, and additionally implements the draft-ietf-ipsec-ikev2-16.txt draft.
The term IPsec is sometimes used to describe the entire protocol of IPsec data services and IKE security
Note
protocols and is other times used to describe only the data services.
This chapter includes the following sections:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
OL-18084-01, Cisco MDS NX-OS Release 4.x
About IPsec, page 37-2
About IKE, page 37-3
IPsec Prerequisites, page 37-3
Using IPsec, page 37-4
IPsec Digital Certificate Support, page 37-7
Manually Configuring IPsec and IKE, page 37-10
Optional IKE Parameter Configuration, page 37-14
Crypto IPv4-ACLs, page 37-16
IPsec Maintenance, page 37-28
Global Lifetime Values, page 37-28
Displaying IKE Configurations, page 37-30
Displaying IPsec Configurations, page 37-30
Sample FCIP Configuration, page 37-34
Sample iSCSI Configuration, page 37-39
Default Settings, page 37-40
C H A P T E R
Cisco MDS 9000 Family CLI Configuration Guide
37
37-1