IPSec??

1
IPSec??

• ???
• shenguowei_at_hrbeu.edu.cn

2
????
IPSec???????
IPSec?AH??
IPSec?ESP??
IPSec?IKE??
??IPSec?VPN??
3
IPSec??
??
????????????,?????????????????????????

• ?????

1
?????(Authentication Header, AH)
2
??????(Encapsulating Security Payload, ESP)
3
Internet????(Internet Key Exchange, IKE)
4
IPSec???????
5
IPSec?????
6
IPSec????

• IPSec?????????????????

????
????
7
AH??
AH?? ?IP??????????????? ????????????
??????(????)????IP???(????)
AH???
8
AH???
AH??????? ?????????
????
????
9
ESP??

• ESP????
• ?IP???????????????????????????????

ESP???
10
IKE??
IKE????ISAKMP?Oakley?SKEME,????????,?????ISAKMP??
??????,?????Oakley?SKEME???????
IKE?? ????
11
IKE?????

• 1.Diffie-Hellman????
• 2.????
• 3.??????
• 4.??????
• 5.????

12
IKE??????

• ?????

IKEv2??? IPSec????2005?12????IKE2? IKERFC2409 IK
Ev2RFC4306
13
??IPSec?VPN??

• VPN???
• RFC2746?IP VPN?????IP VPN?????IP??????????????,?
  ?ISP????NSP???????????,??????????????
• VPN?????
• 1.IPSec??
• 2.MPLS??
• 3.SSL??

14
???IPSec VPN?????
15
IKE??1
16
IKE??2
17
IPSec SA (Security Association)
?SPI (Security Parameter Index),?IKE???????????,?
?SPI???IPSec??????????,??SPI???SAD?SPD,??????????
????????hash???????SA????????,????IPSec??????IPSe
c SA?
18
? ?!