Brocade Web Tools Administrators Guide (Supporting Fabric Manual de usuario descargar pdf (Pagina 225)

FIGURE 44 AH header in transport mode and tunnel mode

Encapsulating Security Payload

ESP provides authentication, and also provides privacy by encrypting the IP datagram. The use of an

ESP header is similar to the use of the AH header. A hash algorithm is used to calculate an

authentication value, the authentication value is sent in an IP datagram, and the same hash algorithm is

used by the receiver to verify the authentication value. ESP can be used in either transport mode or

tunnel mode, as shown in the following figure.

FIGURE 45 ESP header in transport mode and tunnel mode

Basic IPsec configurations

There are three basic configurations for IPsec use:

• Endpoint to Endpoint

• Gateway to Gateway

• Endpoint to Gateway

Endpoint to Endpoint

In an endpoint to endpoint configuration, both endpoints implement IPsec. Transport mode is commonly

used in endpoint to endpoint configurations, and only a single pair of addresses is used. Typically, this

Encapsulating Security Payload

Web Tools Administrator's Guide 225

53-1003169-01

1 2 ... 220 221 222 223 224 225 226 227 228 229 230 ... 273 274

Sin comentarios

Brocade Web Tools Administrators Guide (Supporting Fabric Manual de usuario Pagina 225