cid b996852fd46f4deeff85b026d44c014d8486bc6643448d9b737a2556b14e2942 · original · via openalex
Title: IPsec and IKEv2 Authors: Lawrence E. Hughes Venue: Apress eBooks Year: 2022 Canonical: doi:10.1007/978-1-4842-8603-6_7 URL: https://doi.org/10.1007/978-1-4842-8603-6_7 Collector: openalex OA: false ABSTRACT This chapter covers two advanced protocols for TCP/IP called IPsec and IKEv2. IPsec is for “Internet Protocol Security” and adds authentication and encryption at the Internet Layer. IKEv2 is the Internet Key Exchange protocol for use with IPsec, and the current version is 2. You can use IPsec without IKEv2 with manual key management, but this is not scalable or particularly secure. Both IPsec and IKEv2 are available for IPv4 and IPv6, but NAT breaks both IPsec itself and IKEv2, so IPsec works far better over IPv6 (where there is no NAT to break them). IPsec was created for both IPv4 and IPv6, in RFC 1825 , “Security Architecture for the Internet Protocol,” August 1995: This memo describes the security mechanisms for IP version 4 (IPv4) and IP version 6 (IPv6) and the services that they provide.