ipsec services

In the network IP layer , IPSEC provides encryption services to support data origin authentication , ta integrity and confidentiality .

IPsec在网络的IP层上提供加密服务以支持数据来源认证、数据的完整性和机密性。

IPSec offers security services including connectionless integrity , data origin authentication , protection against replays , confidentiality and limited traffic flow confidentiality for IP and upper layer protocols .

IPSec为IP及上层协议提供了无连接完整性、数据源身份认证、抗重播攻击、数据内容的机密性和有限的通信流量机密性等安全服务。

In order to prevent from being accessed to the information of IP header , IPSec provides security services mainly by encrypting and authenticating the whole IP packets . But accessing to the information of IP header is the thing that NAT and Firewall should do .

IPSec主要是通过对整个IP报文进行加密和认证，防止外部对IP头信息的访问来提供安全服务，而NAT、防火墙都要访问或者修改IP报文的头信息。

Internet Key Exchange ( IKE ) is an important part of IPSec . It provides services of authentication , policy negotiation and key exchange .

IKE是IPSec协议集的重要组成部分，提供密钥协商、策略协商和身份认证的功能。

IPSec can provide security services which include data confidentiality , data integrity and data origin authentication through the Internet Key Exchange ( IKE ) Protocol 、 Authentication Header Protocol ( AH ) and Encapsulating Security Payload ( ESP ) Protocol .

IPSec综合使用了因特网密钥交换协议IKE、认证头协议AH以及封装安全载荷协议ESP，所以它能够提供数据的机密性、数据的完整性以及数据源认证等功能。

Its advantage is integrating IPSec in IPV6.Introduces IPV6s protocol security and Security strategy , describes the relation of IPSec and other web services .

介绍了IPv6网络的协议安全和安全机制，论述了IPSec与其它服务的互通。