Sierra Wireless IPSec Podręcznik Użytkownika Pobierz pdf (Strona 8)

Rev 2.2 Jun.11 1

1: Introducing IPSec

• Overview

• Scenarios IPprotocolthatdrivestheInternetisinherentlyinsecure.

InternetProtocolSecurity(IPSec),whichisastandards‐based

protocol,securescommunicationsofIPpacketsoverpublic

networks.

Organizationsarestrivingtoprotecttheircommunication

channelsfromunauthorizedviewingandenforcingauthenti

‐

cationoftheentitiesattheothersideofthechannel.

Unauthorizedaccesstothesensitivedatacanbeavoidedby

usingIPSec.ByapplyingsecurityattheIPlayerintheOSI

model,communicationscanbeprotected.Inthismannerthe

upperlayersintheOSImodelcanleveragethesecurity

servicesprovidedattheIPlayer.

SierraWirelessAirLink™hasaddedIPSec,asalatestaddition

tothelistoffeatures,inalltheALEOS‐poweredAirLinkXand

XTplatformsofdevices.

Overview

IPSecisacommonnetworklayersecuritycontrolandisused

tocreateavirtualprivatenetwork(VPN).

TheadvantagesoftheIPSecfeatureincludes:

• DataProtection:DataContentConfidentialityallowsusers

toprotecttheirdatafromanyunauthorizedview,because

thedataisencrypted(encryptionalgorithmsareused).

• AccessControl:AccessControlimpliesasecurityservice

thatpreventsunauthorizeduseofaSecurityGateway,a

networkbehindagatewayorbandwidthonthatnetwork.

• DataOriginAuthentication:DataOriginAuthentication

verifiestheactualsender,thuseliminatingthepossibility

offorgingtheactualsender’sidentificationbyathird‐

party.

• DataIntegrity:DataIntegrityAuthenticationallowsboth

endsofthecommunicationchanneltoconfirmthatthe

originaldatasenthasbeenreceivedastransmitted,

withoutbeingtamperedwithintransit.Thisisachieved

byusingauthenticationalgorithmsandtheiroutputs.

TheIPSecarchitecturemodelincludestheSierraWireless

AirLinkmodemasaremotegatewayatoneendcommuni

‐

cating,throughaVPNtunnel,withaVPNgatewayatthe

1 2 3 4 5 6 7 8 9 10 11 12 13 ... 33 34

Brak uwag

Sierra Wireless IPSec Podręcznik Użytkownika Strona 8