Welcome back to the course.
In the previous module,
we learned a little bit about IPsec and its history and purpose.
We also covered a little bit about the services provided by
IPsec and how it helps mitigate attacks.
This module is all about the building blocks of IPsec and how it all
fits together to form the functional protocol suite.
In this module, we're going to cover a lot of the small details about IPsec.
First, we're going to talk about the building blocks of it.
This will include things like the security protocols and associations,
as well as key management.
We'll then go into the various components of IPsec,
including the various databases for it.
Then we're going to detail the authentication protocols and
how they work for the protocol suite.
This is all about SA establishment.
We'll cap it all off with a demo showing IPsec in action and
the components within it and give a brief summary of what was
learned throughout the module.
Everything that we're covering in this module will give you the
context into the functionality of the protocol suite.
These are all of the smaller pieces that form together to make it work,
so understanding them and how they fit with each other will
hopefully help solidify some knowledge about IPsec.
Our demo that we're going to have later on will help you visualize the
information since you'll be seeing it in action.
I really like this quote, and I think it's really fitting for IPsec.
It really does help show that you can use multiple items to
make something so strong and so useful.
Since we're building the IPsec protocol suite and
learning how it's supposed to work, we need a visual representation of it.
Let's say we have this IPsec protocol as a whole.
Within it, or rather what makes this function, are the pieces within it.
I like visual representations of what I'm learning.
So these pieces work together to make this suite function properly.
We have the security protocols, security associations,
key management, and cryptographic algorithms that make this up.
Since IPsec stands for, well, IP security,
and it's intended to secure IP traffic,
we need to have things like crypto algorithms and authentication methods in the
suite to ensure that we're providing the proper security.
We're about to cover these blocks in a little bit more detail next, so without further ado, let's start building up this thing called IPsec.