Awesome!
We finished the demo configuring and analyzing IKEv2 in the lab.
That one was really fun to do.
IKEv2 is the future of the IPsec suite,
that is until the IETF decides to revamp it and improve it to version 3.
Not really sure when that'll happen though,
so for now, it's all about version 2.
This is why it's super important to learn this inside and out
if you want to futureproof your knowledge.
There are so many different ways that you can implement this technology.
I highly recommend experimenting with them and figuring out
what works best for you and your organization.
After all, information security is crucial in the industry today.
We covered a lot about IKEv2 in this module and built upon our
previous knowledge from the IKEv1 module.
We compared IKE version 1 with version 2 to start
out the learning in this module.
Then, we discussed some of the benefits of IKEv2 over IKEv1,
such as the ability to provide reliability to our
connections that IKE establishes.
This is a very important benefit in my opinion because it helps us with the
assurance that the connection will secure our traffic.
After that, we went into the IKE modes that are present with version 2.
There's no more names for the modes,
as they're just exchanges that we see to establish the connections.
We then talked about the authentication methods that IKEv2 uses,
adding that EAP protocol is one of them.
Finally,
we talked about the two IKE phases and how they differ
slightly between the two versions.
We were able to lab IKEv2 up as well to see it in action.
And with that,
we're done with the IKE conversations and are ready to move on
to the next topic in this IPsec conversation,
IPv6.
This one is going to be an interesting module,
and I'm really excited to dig into IPv6 and show you how
IPsec was a main concept in its development. Join me in the next module, and we'll talk all about it.