Avaya Configuring IP Security Services Manuale Utente Scaricare il pdf (Pagina 22)

100

Configuring IPsec Services

1-4

304111-B Rev 00

IPsec Protection

To configure a router with IPsec, you first configure the router interface as an

IP interface. Then you add the IPsec software to the IP interface, creating a

security gateway. A security gateway is a router between a trusted network (for

example, the enterprise intranet) and an untrusted network (the Internet) that

provides a security service such as IPsec.

The router interface is secured with inbound and outbound security policies that

filter traffic to and from the router module. The data packets themselves are

protected by IPsec protocol processing specified by security associations (SAs).

Figure 1-1 shows how IPsec can protect data communications within an enterprise

and from external hosts.

Figure 1-1. IPsec Environment: Unique Security Associations (SAs)

Between Routers

IP0088A

Security

associations

(SAs A,B)

Security

associations

(SAs C,A)

Security associations

(SAs B,C)

Server

Router A

Router B Router C

Corporate

headquarters

Host Host

Partner

Branch office

IP security

gateway

IP security

gateway

IP security

gateway

IPsec

services

IPsec

services

IPsec

services

Public

network

1 2 ... 17 18 19 20 21 22 23 24 25 26 27 ... 99 100

Commenti su questo manuale

Nessun commento

Avaya Configuring IP Security Services Manuale Utente Pagina 22

Commenti su questo manuale

Prodotti e manuali riguardandi Software Avaya Configuring IP Security Services