IPSEC+VPN+基础知识范例.ppt

IPSEC VPN 基础知识 作者:locke Email:locke_peng@ Security RS CCIE#12197 Based on collins version 必备知识 课程内容 加密历史和技术 对称加密算法的特点 不对称算法的特点 身份验证和完整性 对数据流的密钥化散列 对数据流的数字签名 提前的身份验证:RSA签名 提前的身份验证:DSA签名 密钥交换(1) 密钥交换(2) 密钥交换(3) 完美向前保密 INTERNET面临的威胁 IPSEC基本概念 IPSec is a defined encryption standard that encrypts the upper layers of the OSI model by adding a new predefined set of headers. A number of RFCs defined IPSec. IPSec is a mandatory requirement for IP version 6. (IPV6 is not covered in the examination.) IPSec ensures that the network layer of the OSI model is secured. In TCP/IP’s case, this would be t