IPSec Virtual Private Network Fundamentals

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [V] [W] [X]

ICMP messages

     rate-limiting

     unreachables, troubleshooting in firewalled VPN environments

identifying IPsec transform set mismatches,

IKE,

     authentication errors, troubleshooting

    authentication services

         pre-shared keys,

         RSA encryption,

         RSA signatures,

         X.509 certificates,

     Diffie-Hellman secret key generation

     keepalives, removing stale SAs from SADB

     key mismatches, troubleshooting

     mode config extension

    Phase I negotiation

         aggressive mode negotiation,

         main mode negotiation,

    Phase II negotiation

         DPD,

         IKE keepalives,

         PFS,

         quick mode negotiation,

     SA negotiation and maintenance

     SA proposal mismatches, troubleshooting

     x-auth

     xauth extension

impact of vendor interoperability on path availability,

In-Path encryption,

integrity,

IntServ, impact of IPsec on,

invalid SPI recovery,

IPComp,

IPPCP (IP Payload Compression Protocol),

IPsec Prefragmentation,

IPsec+GRE model, 2nd

     geographic HA, configuring 2nd

     sample configurations

     tunnel establishment, verifying

ISAKMP,

     configuring

ITU-T X.509v3compliant certificates,

IV (Initialization Vector),