Collaborate Disseminate
I am reading about IPsec and am confused of what exactly is "IPsec", is it a network layer protocol, or is it a technology that uses involves multiple protocols? All web searches tell me IPsec is a "protocol" that runs … Continue reading Shouldn’t IPsec be an application layer protocol since it is "over UDP"?
I setup an IPsec ESP connection between a test laptop and an embedded device, in transport mode.
Below, i show the iptables of the embedded device.
As the rules indicate, icmp traffic is allowed, and when I do a ping from my test laptop to… Continue reading iptables shows that esp line is not used while packages are correctly processed
From my understanding, data moves from OSI Layer 7 down to Layer 1 when its being prepared to get sent. On each layer, data gets encapsulated within the data of the layer below it. Ex: A Layer 3 IP packet is encapsulated within a Layer 2 e… Continue reading Since IPSec works on Layer 3 (Network), does that mean it also provides protection for all the higher layers?
When one peer is trying to negotiate an ESP SA, it sends a security association (SA) payload to the other peer. This SA payload must contain at least one proposal, suggesting at least one encryption and one integrity transform to use. It m… Continue reading Do IKEv2 ESP proposals really require a unquie SPI per proposal?
Multiple IPSec implementations I’ve run across support "AES-256" as an encryption algorithm. (pfSense has this, Checkpoint has this.)
What block cipher mode of operation is this?
Continue reading In IPSec, what block cipher mode of operation is "AES-256"?
I’m 100% confused after spending hours learning IPsec.
The options for each of my questions are: Tunnel Mode, Transport Mode, ESP, AH.
In which is a new IP Header added in addition to the current IP Header?
In which is the original IP He… Continue reading Solving Confusion regarding IPsec [closed]
I was reading about how IPsec works in Tunnel mode but I’m interested in one question.
I understand that IPsec encrypts the IP layer (not only) and adds a new one with the addresses of the 2 gateways connecting between 2 Hosts.
What if the… Continue reading Will IPsec work After the Following Change?
I’m deeper into different VPN technologies for university and wondering, how Wireguard is handling the IP-packets (header and payload) compared to IPsec’s tunnel and transport mode. May someone explain that to me?
Continue reading Comparing Wireguard to IPsec: Is Wireguard working like transport- or tunnel-mode?
I setup an IKE VPN server for road warriors. I actually have this working (YAY!) but took some shortcuts that are leaving me with a working yet not-right/secure setup. My setup is as follows:
My server (DNS name vpn.mydomain.com) contains … Continue reading Where should private key(s) reside in IPsec VPN tunnel
As the network service mesh sits on layer 3 of the OSI model (the network layer), can a IPSec VPN be used for communication across the public network?
https://networkservicemesh.io/