B
% What Is IPSec? GA
S
REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO Internet, Networking, & Security > Home Networking
visibility
236 views
thumb_up
29 likes
E
She currently writes digital content for technology companies in the U.S. and Australia.
thumb_up
16 likes
J
lifewire's editorial guidelines Updated on April 23, 2020 Tweet Share Email Tweet Share Email
In This Article
Expand Jump to a Section A Brief History How It Works Protocols and Components Tunneling Modes IPSec, which stands for Internet Protocol Security, is a suite of cryptographic protocols protecting data traffic over Internet Protocol networks. IP networks—including the World Wide Web as we know it—lack encryption and privacy. IPSec VPNs address this weakness, by providing a framework for encrypted and private communication on the web.
thumb_up
7 likes
E
Here's a closer look at what IPSec is and how it works with VPN tunnels to protect data over unsecured networks.
A Brief History of IPSec
When the Internet Protocol was developed back in the early '80s, security was not high on the list of priorities.
thumb_up
1 likes
L
However, as the number of internet users continued to grow, the need for greater security became evident. To address this need, the National Security Agency sponsored the development of security protocols back in the mid-80s under the Secure Data Network Systems program. This led to the development of Security Protocol at Layer 3, and eventually, the Network Layer Security Protocol.
thumb_up
40 likes
M
Several more engineers worked on this project throughout the '90s, and IPSec grew out of these efforts. IPSec is now an open-source standard as a part of the IPv4 suite.
thumb_up
9 likes
A
How IPSec Works
When two computers establish a VPN connection, they must agree on a set of security protocols and encryption algorithms, and exchange cryptographic keys to unlock and view the encrypted data. That's where IPSec enters the picture.
thumb_up
8 likes
S
IPSec works with VPN tunnels to establish a private two-way connection between devices. IPSec is not a single protocol; rather, it's a complete suite of protocols and standards that work together to help ensure the confidentiality, integrity, and authentication of internet data packets flowing through a VPN tunnel.
thumb_up
41 likes
R
Here's how IPSec creates a secure VPN tunnel: It authenticates data to ensure data packet integrity in transit.It encrypts internet traffic over VPN tunnels so data can't be viewed.It protects against data replay attacks which can lead to unauthorized logins.It enables secure cryptographic key exchange between computers.It offers two security modes: tunnel and transport. VPN IPSec protects data flowing from host-to-host, network-to-network, host-to-network, and gate to gateway (called tunnel mode, when an entire IP packet is encrypted and authenticated).
thumb_up
43 likes
V
IPSec Protocols and Supporting Components
The IPSec standard breaks into several core protocols and supporting components.IPSec Core Protocols
IPSec Authentication Header (AH): This protocol protects the IP addresses of the computers involved in a data exchange to ensure that bits of data are not lost, changed, or damaged during transmission.
thumb_up
13 likes
A
AH also verifies that the person who sent the data actually sent it, protecting the tunnel from infiltration by unauthorized users.Encapsulating Security Payload (ESP): The ESP protocol provides the encryption part of the IPSec, which ensures the confidentiality of data traffic between devices. ESP encrypts the data packets/payload and authenticates the payload and its origin within the IPSec protocol suite. This protocol effectively scrambles internet traffic, so that anyone looking at the tunnel can't see what's there.
thumb_up
27 likes
J
ESP both encrypts and authenticates data, whereas AH only authenticates data.
IPsec Supporting Components
Security Associations (SA): Security Associations and policies establish the different security contracts used in an exchange.
thumb_up
14 likes
I
These contracts might define the type of encryption and hashing algorithms to be used. These policies are often flexible, allowing devices to decide how they want to handle things.Internet Key Exchange (IKE): For encryption to work, the computers involved in a private communication exchange need to share encryption keys. IKE allows two computers to securely exchange and share cryptographic keys when establishing a VPN connection.Encryption and Hashing Algorithms: A cryptographic key works using a hash value, which is generated using a hash algorithm.
thumb_up
48 likes
H
AH and ESP are generic in that they don't specify a particular type of encryption. However, IPsec often uses the Message Digest 5 or the Secure Hash Algorithm 1 for encryption. Anti-replay protection: IPSec also incorporates standards to prevent the replay of any data packets that are part of a successful login process.
thumb_up
50 likes
C
This standard prevents hackers from using replayed information to replicate the login themselves. IPSec is a complete VPN protocol solution on its own, or as an encryption protocol within L2TP and IKEv2.
thumb_up
1 likes
S
Tunneling Modes Tunnel and Transport
IPSec sends data either using tunnel or transport mode. These modes are closely related to the type of protocols used, either AH or ESP.
thumb_up
36 likes
C
Tunnel mode: In tunnel mode, the entire packet is protected. IPSec wraps the data packet in a new packet, encrypts it, and adds a new IP header.
thumb_up
30 likes
M
It is commonly used in site-to-site VPN set ups.Transport mode: In transport mode, the original IP header remains and is not encrypted. Only the payload and ESP trailer are encrypted. Transport mode is often used in client-to-site VPN set ups.
thumb_up
11 likes
H
As far as VPNs go, the most common IPSec configuration you'll see is ESP with authentication in tunnel mode. This structure helps internet traffic to move securely and anonymously inside a VPN tunnel over unsecured networks.
thumb_up
16 likes
C
Was this page helpful? Thanks for letting us know! Get the Latest Tech News Delivered Every Day
Subscribe Tell us why!
thumb_up
45 likes
J
Other Not enough details Hard to understand Submit More from Lifewire What Is a Cryptographic Hash Function? How to Fix a VPN That's Not Connecting COMODO Disk Encryption v1.2 (Free Full-Disk Encryption) What Is Network Encryption? What Is SHA-1?
thumb_up
10 likes
D
(SHA-1 & SHA-2 Definition) What Is an Intrusion Prevention System (IPS)? What Is a VPN?
thumb_up
26 likes
G
What Is PPTP: Point-to-Point Tunneling Protocol What Is File Transfer Encryption? What is TLS vs. SSL in Online Security?
thumb_up
40 likes
L
TCP vs. UDP How to Browse the Web Anonymously The 5 Best Secure Email Services for 2022 How Web Browsers and Web Servers Communicate The 5 Best VPN-Enabling Devices of 2022 What Are WEP and WPA?
thumb_up
11 likes
J
Which Is Best? Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies
thumb_up
3 likes
Similar Discussions
-
Jude Bellingham decides future destination amid interest from Liverpool Chelsea and Real Madrid Reports
-
5 least useful GTA Online vehicles in 2022
-
From an idol to a supermodel 10+ photoshoots pf BTS V that prove he was born for the runway
-
Boruto Chapter 73 Release Date and Time Where to read and more
-
Lada Priora Tinted Simulator APK Download for Android
-
Simulator car key APK Download for Android
-
Planfor Força de Vendas APK Download for Android
-
Gt Car Stunt Games Mega Ramp APK Download for Android
-
Hollywood les sc nes de sexe sous haute surveillance avec les coordinateurs d intimit Sexe Cin ma
-
Tel ma tre tel chien nos chiens ont ils vraiment le m me caract re que nous ?
-
Putin usa su mejor arsenal para atacar a civiles en su revancha tras el ataque contra el puente de Crimea Elena Bogush
-
Mapamundi de un cirujano Uniportal Epcirujano Medicina
-
US clears Novavax COVID booster dose amNewYork Covıd Novavax
-
Capitol rioter gets 34 month term for assaulting police and journalist
-
Econom a y la banca estudian ayudar a las familias si sus hipotecas suben un 30% Banca Eur bor
-
NBA 2K23 gets major MyTeam updates and removes contracts Dexerto
-
League of Legends Update 12 19 Patch Notes October
-
This Customer Failed To Follow Tattoo Parlor s Instructions
-
Hey Pandas Write Or Share An Original Poem Or Song Closed
-
3 top rated 8K televisions on the market
-
Amazon s best deals for today August 13th
-
Family who lost loved ones in MH370 had relatives on board MH17
-
This is when you feel most relaxed on a Friday
-
These are the 92 seats that will change hands at the general election
-
Commit for One Year or You re Wasting Your Time This Long Time Dropshipper Has 6 Tips all Beginners Should Hear
-
NerdWallet 2018 Home Improvement Report NerdWallet
-
Best Bank of America Credit Cards of October 2022 NerdWallet
-
Facebook s new Feed controls offer more customization Digital Trends
-
HQX File What It Is and How to Open One
-
5 Ways AI Can Make Your Home Happy