IPsec

Provides Packet encryption for the Data Layer.

IKE Phrase

• Uses DHKE over udp/500

Process

1. IKE exchange over UDP 500
2. IPSec tunnel creation with either:
   1. AH to provide authentication and integrity
   2. ESP to provide auth, integrity and encryption
3. Data sent via Tunnel Mode, Transport Mode or Always-on-Mode

Concepts

• IPSec Modes
• IPSec Packet
• PFS
• SA
• SAD
• SPD
• AH
• ESP