Wireless Modem Router: How to implement IP Sec

How to implement IP Sec
Hi,
IPsec is an security service which provide an nice IP based network option. Basically it is a network layer protocol. It encrypts the data so that no one can sniffed the data from network and so the data cannot be hacked. It is great functionality. I need some tips and suggestions on implementing this technology. How to do that and what things must be considered for this.
Reply With Quote
#2
Old 12-01-2010
Trio's Avatar
Trio Trio is offline
Member

Join Date: May 2008
Posts: 2,752
Re: How to implement IP Sec
This technology aims to establish a secure connection (tunnel) between remote entities, separated by an insecure network like the Internet public to see, and do so almost transparent if desired. In article below, this mode is IPSec tunneling mode, which will be described first. In this there properties of tunnels in VPNs is data is encrypted in transit (confidentiality) and protected (integrity), the 2 ends are authenticated, the source and destination addresses are encrypted with IPSec (IP IPSec) and they may show following the protocol of anti-quality replays or prevent attacks man-in-the-middle.
Reply With Quote
#3
Old 12-01-2010
deveritt's Avatar
deveritt deveritt is offline
Member

Join Date: Apr 2008
Posts: 2,528
Re: How to implement IP Sec
Do not neglect the practical aspects such as CPU load due to encryption, the theoretical speed possible, the overhead induced and therefore the actual throughput ... Moreover IPsec is not the only protocol for establishing tunnels, there are others such as point-to-point "as L2TP, L2F, or PPTP, which can induce significant overhead especially when d 'successive encapsulations (L2TPoATM with AAL5, L2TPoEthernet, L2TPoUDP, etc).
Reply With Quote
#4
Old 12-01-2010
Techguru01's Avatar
Techguru01 Techguru01 is offline
Member

Join Date: Oct 2005
Posts: 2,116
Re: How to implement IP Sec
If we see piratically it is a protocol which is difficult to implement and share. This is why because it is complex. The reason for its complexity is its interaction with the other different network process. The same is created by keeping the compatibility in the mind. It has a 3 layer protocol which cannot be modified or changed. It remains constant.
Reply With Quote
#5
Old 12-01-2010
johnson22's Avatar
johnson22 johnson22 is offline
Member

Join Date: May 2008
Posts: 2,111
Re: How to implement IP Sec
We cannot say there are multiple issue with the protocol and its working with the NAT. In other words it integration with the kernel (host). In this they are 3 variants with changing IP. So here the kernel itself stays the most complicated one. This applies to all. Here he BITS returns for separation of IPSec processings.
Reply With Quote
#6
Old 12-01-2010
Jackson2's Avatar
Jackson2 Jackson2 is offline
Member

Join Date: Apr 2008
Posts: 2,265
Re: How to implement IP Sec
The services return to the IPSec protocol. But this is regardless of the encrypted tunneling process in IPSec. If we go for what are the different security options given by it then you have to ensure the different properties of a VAP first. So the IPSec at level 3 gives out a authentication level which is equal to the authentication engine. This authentication engine implements the protocol.
Reply With Quote