Sierra Wireless IPSec Guía de usuario Pagina 8

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 34
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 7
Rev 2.2 Jun.11 1
1
1: Introducing IPSec
• Overview
• Scenarios IPprotocolthatdrivestheInternetisinherentlyinsecure.
InternetProtocolSecurity(IPSec),whichisastandards‐based
protocol,securescommunicationsofIPpacketsoverpublic
networks.
Organizationsarestrivingtoprotecttheircommunication
channelsfromunauthorizedviewingandenforcingauthenti
‐
cationoftheentitiesattheothersideofthechannel.
Unauthorizedaccesstothesensitivedatacanbeavoidedby
usingIPSec.ByapplyingsecurityattheIPlayerintheOSI
model,communicationscanbeprotected.Inthismannerthe
upperlayersintheOSImodelcanleveragethesecurity
servicesprovidedattheIPlayer.
SierraWirelessAirLink™hasaddedIPSec,asalatestaddition
tothelistoffeatures,inalltheALEOS‐poweredAirLinkXand
XTplatformsofdevices.
Overview
IPSecisacommonnetworklayersecuritycontrolandisused
tocreateavirtualprivatenetwork(VPN).
TheadvantagesoftheIPSecfeatureincludes:
• DataProtection:DataContentConfidentialityallowsusers
toprotecttheirdatafromanyunauthorizedview,because
thedataisencrypted(encryptionalgorithmsareused).
• AccessControl:AccessControlimpliesasecurityservice
thatpreventsunauthorizeduseofaSecurityGateway,a
networkbehindagatewayorbandwidthonthatnetwork.
• DataOriginAuthentication:DataOriginAuthentication
verifiestheactualsender,thuseliminatingthepossibility
offorgingtheactualsender’sidentificationbyathird‐
party.
• DataIntegrity:DataIntegrityAuthenticationallowsboth
endsofthecommunicationchanneltoconfirmthatthe
originaldatasenthasbeenreceivedastransmitted,
withoutbeingtamperedwithintransit.Thisisachieved
byusingauthenticationalgorithmsandtheiroutputs.
TheIPSecarchitecturemodelincludestheSierraWireless
AirLinkmodemasaremotegatewayatoneendcommuni
‐
cating,throughaVPNtunnel,withaVPNgatewayatthe
Vista de pagina 7
1 2 3 4 5 6 7 8 9 10 11 12 13 ... 33 34

Comentarios a estos manuales

Sin comentarios