IPSec (IP Security)

Tahir Hussain

Tanmay Shah

outline

introduction

IPSec protocols

scenarios

conclusion

introduction

designed by IETF

“general” security

applications remain unchanged

optional for IPv4, mandatory for IPv6

IPSec protocols

AH – Authentication Header

ESP – Encapsulating Security Payload

ESP

scenario#1

many-to-one gate-way tunnel

ESP tunnel

CBR_Client packet sent vs. IPSec_in packet processed(30 packets sent & 30 packets processed)

Bytes Overhead(540 bytes overhead/gate way)

average end-to-end delay (s)0.275 s for node 8

Scenario#2

one-to-many gate-ways tunnels

packet loss (0)

overhead(1610 bytes/ security gate way 2)

average end-to-end delayo.275 for node 6,7 &8

Scenario#3nested tunnel

nested tunnel

Overhead node 3-6 – tunnel one & node 4-5 – tunnel two

conclusion

tunnel increases the packet overhead

high throughput – high security

delay distributes per tunnel

References

http://www.scalable-networks.com/publications/documentation/model_specs.php

Qualnet model library

agenium_QualNet_Libraries_web.pdf