Demystifying the IP sec puzzle

Delivers a detailed presentation of the revolutionary IPsec technology used today to create virtual private networks and, in the near future, to protect the infrastructure of the Internet itself.

Addresses IPsec's major aspects and components to help professionals evaluate and compare features of different implementations.

Offers a detailed understanding of this cutting-edge technology from the inside, which helps practitioners more effectively troubleshoot problems with specific products.

Collects all the current knowledge of IPsec and describes it in a clear manner, based on standards documents, discussion list archives, and practitioners' lore.

Sheila Frankel is a computer scientist at the National Institute of Standards and Technology (NIST). She holds a B.A. in mathematics from Yeshiva University and an M.S. in computer science from New York University.

Contents

• Preface
• Introduction
• The First Puzzle Piece : The Authentication Header
• The Second Puzzle Piece : The Encapsulating Security Payload
• The Third Puzzle Piece : The Cryptographic Algorithms
• The Fourth Puzzle Piece : The Internet Key Exchange (IKE)
• The Fifth Puzzle Piece : IKE and The Road Warrior
• The Sixith Puzzle Piece : IKE Frills and Add-Ons
• The Glue : PF-KEY
• The Missing Puzzle Piece : Policy Setting and Enforcement
• The Framework : Public Key Infrastructure (PKI)
• The Unsolved Puzzle : Secure IP Multicast
• The Whole Puzzle : Is Ipsec the Correct Solution ?
• List of Acronyms and Abbreviations
• About the Author
• Index