Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Bronze

ipsec

HI everybody!

IPsec also define two protocols, ESP and AH

ESP provides:

Authentication,

message intergrity

encrption antireplay.

For authenticationm which method does ESP use, pre-shared keys or digital signatures?

For message integrity, which method does esp use, HMAC-md5 or HMAC-SHA ?

AH protocol only provides:

Authentication

Message integrity

Which method does AH use for authentication and message integrity?

Thanks a lot and have a nice day!

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: ipsec

Sarah

It's entirely up to you.

ESP can use either pre-shared keys or digital signatures for authentication.

For message intergrity it can use md5 or SHA.

For encryption it can use DES, 3DES, AES.

All of the above are assuming the actual device can support all methods.

AH - again up to you and device dependant.

When you configure an IPSEC VPN on a Cisco device eg. router/firewall you choose which to use.

Jon

1 REPLY
Hall of Fame Super Blue

Re: ipsec

Sarah

It's entirely up to you.

ESP can use either pre-shared keys or digital signatures for authentication.

For message intergrity it can use md5 or SHA.

For encryption it can use DES, 3DES, AES.

All of the above are assuming the actual device can support all methods.

AH - again up to you and device dependant.

When you configure an IPSEC VPN on a Cisco device eg. router/firewall you choose which to use.

Jon

104
Views
0
Helpful
1
Replies
CreatePlease login to create content