Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 769 / 1193

IPsec VPN Overview
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
743
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
IP
SEC
C
ONCEPTS
The following section comprehends a conceptual overview of IPsec:
•
“IPsec Modes of Operation”
•
“IPsec Protocols”
•
“Encryption Algorithms”
•
“Internet Key Exchange”
•
“Security Association (SA)”
IP
SEC
M
ODES OF
O
PERATION
IPsec provides two different modes to exchange protected data across the
different kinds of VPNs:
T
RANSPORT
M
ODE
This mode is applicable for only host-to-host security. For example, this mode can
be used to create a secure association between two personal workstations each
of which has a public address. The protection here is extended to the payload of
IP data.
T
UNNEL
M
ODE
This mode is used to provide data security between two networks. It provides
protection for the entire IP packet and is sent by adding an outer IP header which
corresponds to the two tunnel endpoints. The unprotected packets generated by
the hosts travel through the protected “tunnel” created by gateways on both the
ends. The outer IP header corresponds to these gateways. Since the tunnel mode
hides the original IP header, it facilitates security of the networks with private IP
address space.
Figure 27: Tunnel Mode
Note: The OA-700 supports only Tunnel Mode.