So let us begin with another important clue to call in network security, and that is the IP protocol
or the Internet Protocol Security Protocol, IP, SEC.
On the other hand, IP security was designed by the IETF for providing authentication and encryption.
Make sure that, you know, IP SEC works at the network layer of the oversight model and secures all
the applications that operate in the layers above it, which means IP SEC will provide security for
transport, layer four sessions, legal representation layer and for application layer as well.
I hope you know the basics of the reference model, the USA model and the DCP model because it is sanctioned
by the IETF, as I said earlier, and designed to work with IP V4 as well as IPv6.
It has got a huge amount of industry support and it sends IP security protocol is a gold standard for
the virtual private networks on the Internet in today's world.
Now IP SOC has two major protocols working with it, which are the authentication header edge and the
other one is encapsulating security protocol payload I'm sorry, E.S.P.
Now this authentication header, I'll take my pen.
This authentication header provides authentication.
Services on the authentication services means they authenticate the user through different mechanisms
like one time passwords, username, password login, anything but authentication header protocol,
just Herbsaint authentication of the user.
But on the contrary, E.S.P.
That is encapsulating security protocol provides both authentication and encryption abilities as well.
Now both of these protocols can be used with either Morde discussed in the Alaskas for the.
Now, I, Piecyk, works in tumults transport, more and more, transport more, create a secure tunnel
between the two end to end devices.
Now this means that regardless of how many foreign networks, including the Internet the packet traverses,
it is protected because it creates a tunnel between two end to end devices.
Now the data is protected by authentication and our encryption, on the other hand.
And then more.
The panel is created between the two end points, such as two routers or two gateway servers protecting
all the traffic that goes through the tunnel.
It is commonly used between two offices to protect all the traffic going between the offices, regardless
of the source and the destination.
Now what is I as a gay MP?
I as a gay MP, stands for Internet Security Association and Key Management Protocol, which defines
the procedures and packet formats to establish, negotiate, modify and delete security associations.
Security associations.
Ethe contains information required to execute security services such as health authentication.
We have seen in the last couple of minutes the authentication and paillard encapsulation.
Now I see Campese real value is the ability to provide a framework for safely transferring keys and
the authentication data independent of the key generation technical encryption algorithm and the authentication
mechanism.
So I seekamp is integrated into another security mechanisms, though we have already discussed, for
example, the IP.
Now here's a TCP IP packet in the IP segment with authentication header so you can see PKB payload,
DCP Header, Destination Source, IP address and IP here.
This is the standard PXP packet.
Okay, but when it is combined with authentication header you have authentication header here and hence
authenticated by all of this is encrypted and then sent into a tunnel using the IP protocol so that
anyone who is trying to access this data will not be able to access it.
And this is the tunnel where the header is encrypted, DCP payload is encrypted and E.S.P header is
added here.
This is more powerful.
And actually, as I said earlier, there are two moonstone l'amore and transport more.
So it depends upon those type of service or type of the devices into any devices which are going to.
That is it for this lecture.
Just remember, from the exams and interview points of view, what is the meaning of IP Slark and why
do we use APIs?
Basically, it's a standard protocol to provide more security by transmitting data over the network
layer and delayers about it.
I will see you in the next lecture.