Cisco IKEV1 v.s IKEV2 Site to Site VPN Configuration - SPVN 300-730

Cisco IKEV1 v.s IKEV2 Site to Site VPN Configuration


Get 30% off ITprotv.com with: You can use promo code: OSCAROGANDO2
Follow Me on Twitter: https://twitter.com/CCNADailyTIPS

IKEv1:


https://tools.ietf.org/html/rfc2409

In computing, Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol used to set up a security association (SA) in the IPsec protocol suite. IKE builds upon the Oakley protocol and ISAKMP. IKE uses X.509 certificates for authentication ‒ either pre-shared or distributed using DNS (preferably with DNSSEC) ‒ and a Diffie–Hellman key exchange to set up a shared session secret from which cryptographic keys are derived. In addition, a security policy for every peer which will connect must be manually maintained.

IKEV2:

https://tools.ietf.org/html/rfc4306
IKEv2 (Internet Key Exchange version 2) is a VPN encryption protocol that handles request and response actions. It makes sure the traffic is secure by establishing and handling the SA (Security Association) attribute within an authentication suite – usually IPSec since IKEv2 is basically based on it and built into it.

Comments


Books
Nothing here yet!!