Packt+ | Advance your knowledge in tech

You're reading from CCNA Security 210-260 Certification Guide Build your knowledge of network security and pass your CCNA Security exam (210-260)

Product type Paperback

Published in Jun 2018

Publisher Packt

ISBN-13 9781787128873

Length 518 pages

Edition 1st Edition

Tools

Cisco

Concepts

IT Certification

Authors (3):

Glen D. Singh

Vinod

Anandh

View More author details

Table of Contents (23) Chapters

Title Page

Packt Upsell

Contributors

Preface

1. Exploring Security Threats FREE CHAPTER

2. Delving into Security Toolkits

3. Understanding Security Policies

4. Deep Diving into Cryptography

5. Implementing the AAA Framework

6. Securing the Control and Management Planes

7. Protecting Layer 2 Protocols

8. Protecting the Switch Infrastructure

9. Exploring Firewall Technologies

10. Cisco ASA

11. Advanced ASA Configuration

12. Configuring Zone-Based Firewalls

13. IPSec – The Protocol that Drives VPN

14. Configuring a Site-to-Site VPN

15. Configuring a Remote-Access VPN

16. Working with IPS

17. Application and Endpoint Security

1. Other Books You May Enjoy

Leave a review - let other readers know what you think

Index

Internet Key Exchange

The IPSec protocol suite uses Internet Key Exchange (IKE) to securely handle the security associations in the creation of an IPSec VPN. Before the IPSec VPN is established, IKE needs to establish an IKE phase 1 tunnel and an IKE phase 2 tunnel.

IKE phase 1

The IKE phase 1 is used to authenticate the IPSec VPN peers and established a secure, encrypted tunnel to further allow the peers to exchange IKE information.

The main characteristics of the IKE phase 1 are as follows:

The phase 1 tunnel is used to exchange any packet/traffic originating from one peer that is destined for the other peer. If there's an IKE phase 1 tunnel between two routers, Router A and Router B, if one router wants to send a message to the other, the traffic will use the IKE phase 1 tunnel only.
The IKE phase 1 is used to negotiate all the SA between the two peers.
The SA are mutual hashing algorithms, authentication methods, key exchange method, encryption algorithm, and the time the tunnel should be...