Packt+ | Advance your knowledge in tech

You're reading from CCNA Security 210-260 Certification Guide Build your knowledge of network security and pass your CCNA Security exam (210-260)

Product type Paperback

Published in Jun 2018

Publisher Packt

ISBN-13 9781787128873

Length 518 pages

Edition 1st Edition

Tools

Cisco

Concepts

IT Certification

Authors (3):

Glen D. Singh

Vinod

Anandh

View More author details

Table of Contents (23) Chapters

Title Page

Packt Upsell

Contributors

Preface

1. Exploring Security Threats FREE CHAPTER

2. Delving into Security Toolkits

3. Understanding Security Policies

4. Deep Diving into Cryptography

5. Implementing the AAA Framework

6. Securing the Control and Management Planes

7. Protecting Layer 2 Protocols

8. Protecting the Switch Infrastructure

9. Exploring Firewall Technologies

10. Cisco ASA

11. Advanced ASA Configuration

12. Configuring Zone-Based Firewalls

13. IPSec – The Protocol that Drives VPN

14. Configuring a Site-to-Site VPN

15. Configuring a Remote-Access VPN

16. Working with IPS

17. Application and Endpoint Security

1. Other Books You May Enjoy

Leave a review - let other readers know what you think

Index

What is IPSec?

IPSec is a framework or suite of protocols combined to ensure secure data communication across an IP network. IPSec combines different protocols to provide data confidentiality (encryption), data integrity (hashing), authentication (PSK and RSA digital certificates), and key exchange (Diffie-Hellman) between devices over an untrusted network:

Within the IPSec framework, there are two protocols that assist with the transportation of IP packets across the IPSec VPN tunnel, these are known as Authentication Header (AH) and Encapsulation Security Payloads (ESPs).

Note

When creating an IPSec VPN tunnel, either the AH or the ESP can be used as a standalone protocol. However, both AH and ESP can be used together.

Authentication Header

The AH provides the authentication and integrity of the data packets as they are passed along the IPSec VPN tunnel. However, it does not provide any confidentiality (encryption) of the data being sent across the tunnel. Instead, it hashes the datagram (header...