参考ipsec配置站点到.pdfVIP

Five-Step IPSec Process • Step 1: IPSec Process Initiation – Determining interesting traffic • What traffic needs to be encrypted – Use Extended ACLs • “permit” indicates traffic needing to be encrypted • “deny” indicates traffic not requiring encryption Five-Step IPSec Process (cont.) • Step 2: IKE Phase 1 – Authentication of IPSec peers – Establishing a secure channel (SA) in order to enable IKE exchanges – Performs Diffie- man exchange