HP Cisco MDS 9020 - Fabric Switch Configuration Manual page 849

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Configuring IPsec Network Security
IP security (IPsec) protocol is a framework of open standards that provides data confidentiality, data
integrity, and data authentication between participating peers. It is developed by the Internet Engineering
Task Force (IETF). IPsec provides security services at the IP layer, including protecting one or more data
flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a
host. The overall IPsec implementation is the latest version of RFC 2401. Cisco SAN-OS IPsec
implements RFC 2402 through RFC 2410.
IPsec uses the Internet Key Exchange (IKE) protocol to handle protocol and algorithm negotiation and
to generate the encryption and authentication keys used by IPsec. While IKE can be used with other
protocols, its initial implementation is with the IPsec protocol. IKE provides authentication of the IPsec
peers, negotiates IPsec security associations, and establishes IPsec keys. IKE uses RFCs 2408, 2409,
2410, and 2412, and additionally implements the draft-ietf-ipsec-ikev2-16.txt draft.
The term IPsec is sometimes used to describe the entire protocol of IPsec data services and IKE security
Note
protocols and is other times used to describe only the data services.
This chapter includes the following sections:
About IPsec, page 35-2
•
About IKE, page 35-3
•
IPsec Prerequisites, page 35-3
•
Using IPsec, page 35-4
•
IPsec Digital Certificate Support, page 35-7
•
Manually Configuring IPsec and IKE, page 35-10
•
Optional IKE Parameter Configuration, page 35-14
•
Crypto IPv4-ACLs, page 35-16
•
IPsec Maintenance, page 35-28
•
Global Lifetime Values, page 35-29
•
• Displaying IKE Configurations, page 35-30
• Displaying IPsec Configurations, page 35-31
• Sample FCIP Configuration, page 35-35
Sample iSCSI Configuration, page 35-39
•
Default Settings, page 35-41
•
OL-16184-01, Cisco MDS SAN-OS Release 3.x
35
C H A P T E R
Cisco MDS 9000 Family CLI Configuration Guide
35-1