docs:ipsec
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| docs:ipsec [2013/09/27 14:25] – [(Very) Basic concepts] root | docs:ipsec [2013/09/27 20:58] (current) – root | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== | + | ====== IPSec cheat sheet ====== |
| - | IPSec is tricky, but worse than that, existing documentation is very messy. | + | IPSec is partly |
| * [[docs: | * [[docs: | ||
| * [[docs: | * [[docs: | ||
| + | * [[docs: | ||
| + | * [[docs: | ||
| + | * [[docs: | ||
| ==== How IPSec works with KAME tools ==== | ==== How IPSec works with KAME tools ==== | ||
| Line 38: | Line 41: | ||
| | Transport | IP packet payload | Peer to peer integrity/ | | Transport | IP packet payload | Peer to peer integrity/ | ||
| | Tunnel | Whole IP packet | VPN | AH/ESP + IP/Stage 2 header | | | Tunnel | Whole IP packet | VPN | AH/ESP + IP/Stage 2 header | | ||
| + | |||
| + | === Glossary === | ||
| + | |||
| + | | PSK | Preshared Keys | | ||
| + | | SA | Security Association | | ||
| + | | SAD | Security Association Database | | ||
| + | | SP | Security Policy | ||
| + | | SPD | Security Policy Database | | ||
| + | |||
| + | ==== Linux Kernel modules ==== | ||
| + | |||
| + | < | ||
| + | esp4 | ||
| + | esp6 | ||
| + | sha1_generic | ||
| + | sha256_generic | ||
| + | xfrm4_mode_transport | ||
| + | xfrm6_mode_transport | ||
| + | xfrm_user</ | ||
docs/ipsec.1380284750.txt.gz · Last modified: 2013/09/27 14:25 by root