<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:55" />
    <title>Configuring IPsec Network Security </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1723;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    <a name="997838"></a>


<a name="wp1043201"> </a><h1 class="pTitle">
Configuring IPsec Network Security

</h1>
<a name="wp1072664"> </a><p class="pBody">
IP security (IPsec) protocol is a framework of open standards that provides data confidentiality, data 
integrity, and data authentication between participating peers. It is developed by the Internet Engineering 
Task Force (IETF). IPsec provides security services at the IP layer, including protecting one or more data 
flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a 
host. The overall IPsec implementation is the latest version of RFC 2401. Cisco NX-OS IPsec 
implements RFC 2402 through RFC 2410.

</p>
<a name="wp1072667"> </a><p class="pBody">
IPsec uses the Internet Key Exchange (IKE) protocol to handle protocol and algorithm negotiation and 
to generate the encryption and authentication keys used by IPsec. While IKE can be used with other 
protocols, its initial implementation is with the IPsec protocol. IKE provides authentication of the IPsec 
peers, negotiates IPsec security associations, and establishes IPsec keys. IKE uses RFCs 2408, 2409, 
2410, and 2412, and additionally implements the draft-ietf-ipsec-ikev2-16.txt draft. 

</p>
<a name="wp1058171"> </a><p class="pBody">
The term IPsec is sometimes used to describe the entire protocol of IPsec data services and IKE security 
protocols and is other times used to describe only the data services. 

</p>
<a name="wp1057260"> </a><p class="pBody">
This chapter includes the following topics:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1057264"> </a><li class="pSmartList1"><a href="ipe02.html">Information About IPsec Network Security</a>
</li>
<a name="wp1043236"> </a><li class="pSmartList1"><a href="ipe29.html">Prerequisites for IPsec</a>
</li>
<a name="wp1046652"> </a><li class="pSmartList1"><a href="ipe30.html">Guidelines and Limitations</a>
</li>
<a name="wp1068149"> </a><li class="pSmartList1"><a href="ipe33.html">Default Settings</a>
</li>
<a name="wp1085614"> </a><li class="pSmartList1"><a href="ipe34.html">Enabling IPsec Using FCIP Wizard</a>
</li>
<a name="wp1046685"> </a><li class="pSmartList1"><a href="ipe35.html">Configuring IPsec and IKE Manually</a>
</li>
<a name="wp1085642"> </a><li class="pSmartList1"><a href="ipe42.html">Configuring Crypto</a>
</li>
<a name="wp1136557"> </a><li class="pSmartList1"><a href="ipe49.html">Field Descriptions for IPsec</a>
</li>
</ul></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
