Part VII: IPsec Overhead
by Amjad Inamdar, Graham Bartlett
IKEv2 IPsec Virtual Private Networks: Understanding and Deploying IKEv2, IPsec VPNs, and FlexVPN in Cisco IOS
- About This E-Book
- Title Page
- Copyright Page
- About the Authors
- Note from the Authors
- About the Technical Reviewers
- Dedications
- Acknowledgments
- Contents at a Glance
- Contents
- Foreword
- Icons Used in This Book
- Command Syntax Conventions
- Introduction
- Goals and Methods
- Who Should Read This Book?
- How this book is organized
- Chapter 1 Introduction to IPsec VPNs
- Chapter 2 IKEv2 the Protocol
- Chapter 3 Comparison of IKEv1 and IKEv2
- Chapter 4 IOS IPsec implementation
- Chapter 5 IKEv2 Configuration
- Chapter 6 Advanced IKEv2 features
- Chapter 7 IKEv2 deployments
- Chapter 8 Introduction to FlexVPN
- Chapter 9 FlexVPN Server
- Chapter 10 FlexVPN Client
- Chapter 11 FlexVPN Load Balancer
- Chapter 12 FlexVPN Deployments
- Chapter 13 Monitoring IPsec VPNs
- Chapter 14 Troubleshooting IPsec VPNs
- Chapter 15 IPsec overhead and Fragmentation
- Chapter 16 Migration Strategies
- Part I: Understanding IPsec VPNs
- Part II: Understanding IKEv2
- Chapter 2. IKEv2: The Protocol
- IKEv2 Overview
- The IKEv2 Exchange
- IKE_SA_INIT
- Key Material Generation
- IKE_AUTH
- CREATE_CHILD_SA
- IKEv2 Packet Structure Overview
- The INFORMATIONAL Exchange
- IKEv2 and Network Address Translation
- Additions to RFC 7296
- RFC 5998 An Extension for EAP-Only Authentication in IKEv2
- RFC 5685 Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2)
- RFC 6989 Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2)
- RFC 6023 A Childless Initiation of the Internet Key Exchange Version 2 (IKEv2) Security Association (SA)
- Summary
- References
- Chapter 3. Comparison of IKEv1 and IKEv2
- Brief History of IKEv1
- Exchange Modes
- Anti-Denial of Service
- Lifetime
- Authentication
- High Availability
- Traffic Selectors
- Use of Identities
- Network Address Translation
- Configuration Payload
- Mobility & Multi-homing
- Matching on Identity
- Reliability
- Cryptographic Exchange Bloat
- Combined Mode Ciphers
- Continuous Channel Mode
- Summary
- References
- Chapter 2. IKEv2: The Protocol
- Part III: IPsec VPNs on Cisco IOS
- Part IV: IKEv2 Implementation
- Part V: FlexVPN
- Chapter 8. Introduction to FlexVPN
- Chapter 9. FlexVPN Server
- Sequence of Events
- EAP Authentication
- AAA-based Pre-shared Keys
- Accounting
- Per-Session Interface
- Auto Detection of Tunnel Transport and Encapsulation
- RADIUS Packet of Disconnect
- RADIUS Change of Authorization (CoA)
- IKEv2 Auto-Reconnect
- User Authentication, Using AnyConnect-EAP
- Dual-factor Authentication, Using AnyConnect-EAP
- RADIUS Attributes Supported by the FlexVPN Server
- Remote Access Clients Supported by FlexVPN Server
- Summary
- Reference
- Chapter 10. FlexVPN Client
- Introduction
- FlexVPN Client Overview
- Setting up the FlexVPN Server
- EAP Authentication
- Split-DNS
- Windows Internet Naming Service (WINS)
- Domain Name
- FlexVPN Client Profile
- Backup Gateways
- Tunnel Interface
- Tunnel Initiation
- Dial Backup
- Backup Group
- Network Address Translation
- Design Considerations
- Troubleshooting FlexVPN Client
- Summary
- Chapter 11. FlexVPN Load Balancer
- Chapter 12. FlexVPN Deployments
- Introduction
- FlexVPN AAA-Based Pre-Shared Keys
- FlexVPN User and Group Authorization
- FlexVPN Routing, Dual Stack, and Tunnel Mode Auto
- FlexVPN Client NAT to the Server-Assigned IP Address
- FlexVPN WAN Resiliency, Using Dynamic Tunnel Source
- FlexVPN Hub Resiliency, Using Backup Peers
- FlexVPN Backup Tunnel, Using Track-Based Tunnel Activation
- Summary
- Part VI: IPsec VPN Maintenance
- Chapter 13. Monitoring IPsec VPNs
- Chapter 14. Troubleshooting IPsec VPNs
- Part VII: IPsec Overhead
- Part VIII: Migration to IKEv2
- Chapter 16. Migration Strategies
- Introduction to Migrating to IKEv2 and FlexVPN
- Consideration when Migrating to IKEv2
- Hardware Limitations
- Current VPN Technology
- Routing Protocol Selection
- Restrictions When Running IKEv1 and IKEv2 Simultaneously
- Current Capacity
- IP Addresses
- Software
- Amending the VPN Gateway
- Global IKE and IPsec Commands
- FlexVPN Features
- Familiarization
- Client Awareness
- Public Key Infrastructure
- Internet Protocol Version 6
- Authentication
- High Availability
- Asymmetric Routing
- Migration Strategies
- Migration Verification
- Consideration for Topologies
- Summary
- Chapter 16. Migration Strategies
- Index
- Inside Front Cover
- Inside Back Cover
- Code Snippets
Part VII: IPsec Overhead
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.