IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
746
Beta
Beta
CLI Configuration Guide
Alcatel-Lucent
S
ECURITY
A
SSOCIATION
(SA)
SA is an unidirectional agreement between the VPN participants regarding the
methods and parameters to use in securing a communication channel. Full
bidirectional communication requires at least two SAs, one for each direction. The
main components of SA are the transform details that are used to protect the data.
The tunnel negotiation happens in two phases.
P
HASE
1
Phase 1 is also called as the "
Main Mode
". The objective of "Phase 1" is to
establish a secure channel, authenticate the negotiating parties, and generate
shared keys to protect IKE protocol messages.
Figure 28: Phase 1 Negotiation - Main Mode
MESSAGE 1
MESSAGE 2
MESSAGE 3
MESSAGE 4
MESSAGE 5
MESSAGE 6
ISAKMP HEADER
ISAKMP HEADER
ISAKMP HEADER
Proposal Payload (s)
Accepted Proposal
Payload
Key Exchange Payload (CH)
Nonce Payload
ISAKMP HEADER
Key Exchange Payload (CH)
Nonce Payload
ISAKMP HEADER
Identity Payload
Authentication Data
Payload
ENCRYPTED
ISAKMP HEADER
Identity Payload
Authentication Data
Payload
ENCRYPTED
I
N
I
T
I
A
T
O
R
R
E
S
P
O
N
D
E
R
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...