IPsec Protocol Headers (AH and ESP)

July 16th, 2008 Bryan Posted in Cisco, IPsec |

ESP (RFC 4303) - Encapsulating Security Payload is an IP protocol that is used to protect the CIA (Confidentiality, Integrity and Authenticity) of data and can also prevent IP replay attacks. In transport mode ESP does not encrypt the original IP header only the data payload whereas in tunnel mode the entire packet is encrypted.

AH (RFC 4302) - Authentication Header is used to guarantee connectionless integrity of the packets and it can also protect against IP replay attacks (Integrity, Authentication and Non-Repudiation).

Tags: , ,


You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

One Response to “IPsec Protocol Headers (AH and ESP)”

  1. Joe Says:
    July 17th, 2008 at 8:47 am

    This is kinda like that part in Bourne Identity, right?

Leave a Reply

« CCIE Security (350-018) Pre-qualification test scheduled
Radius and TACACS+ »