How ipsec initiate protection against eavesdropping

**Spiero** · 08-02-2010

What is the role of ipsec in protection against eavesdropping and traffic analysis. I need a detailed description on this. Like wise ipsec can be a medium of data packets traveling but does this method relies really secure on wide networks were data are freely exchanged. I had found only ipsec as an essential protocol but want to familiar more on the working process.

**Milton.J** · 08-02-2010

Confidentiality of data exchanged, IPSec can if you want to encrypt the contents of each IP packet to make sure or guarantee that anyone can read. Authenticity of Data in this the IPSec make sure or guarantee, for each packet exchanged, it has been issued by the good machine and it is destined for the second machine. Integrity of data exchanged in this the IPSec make sure or guarantee no packet undergoes any change (called active attacks) during his trip.

**Spyrus** · 08-02-2010

IPSec will encrypt the actual IP addresses of the foundation and purpose or objective, and the entire IP header match. This is the method of tunneling, which protects any attacker to listen to infer information in sequence about the real identities of the end of the tunnel on the protocols used over IPsec, on the submission using the tunnel (timing -attacks and other).

**Snake08** · 08-02-2010

Protection against replay in this the IPSec can prevent themselves against the damages of capturing one or more packages in order to send them again (without having deciphered) to enjoy the same advantages as the original sender. IPSec is essentially based on several different protocols, some are wholly outside of its IPSec-back offer great elasticity.

**Zachary** · 08-02-2010

Ipsec initiate protection against eavesdropping for this the initial and primary protocol is IKE (Internet Key Exchange, RFC 2409). Applied to IPSec, the protocol aims at first to establish a first tunnel between 2 machines (the tunnel IKE), which can be termed "administrative tunnel. This is Phase 1 of IKE. This protocol is called administrative because it is not the transmission of user data and is used to manage secondary tunnels, their creation, refresh keys, etc.

**Big Fish** · 08-02-2010

Phase 2 of IKE is indeed to establish as many side tunnels as necessary for the transmission of user data between 2 machines. Note that it is possible to use a manual authentication instead of IKE, but as it allows a lot more than authentication, it is much harder to use. The IKE protocol is described in the section on initialization of IPSec.