Juniper IPSec Service Module

IPSec Service Module

The IPSec Service Modules (ERX-IPSEC-MOD and ERX-IPSECURE-MOD) encrypt and/or decrypt packets encoded with the IPSec protocol.

The Internet Protocol Security (IPSec) architecture provides a security suite for the IPv4 and IPv6 network layers. The suite provides such functionality as authentication of origin, data integrity, confidentiality, replay protection, and nonrepudiation of source. In addition to IPSec, the JUNOSe software also supports the Internet Key Exchange (IKE) and Public Key Infrastructure (PKI), which defines mechanisms for key generation and exchange and manages security associations (SAs).

IPSec provides secure tunnels between two peers. To use IPSec security services, security associations are created between hosts. An SA is a simplex connection that allows two hosts to communicate with each other securely by means of IPSec. There are two types of SAs, manual and dynamic.

• Manual SAs require no negotiation; all values, including the keys, are static and specified in the configuration.
• With dynamic SAs, IKE creates dynamic security associations and negotiates SAs for IPSec. The IKE configuration defines the algorithms and keys used to establish the secure IKE connection with the peer security gateway. This connection is then used to dynamically agree upon keys and other data used by the dynamic IPSec SA. The IKE SA is negotiated first and is then used to protect the negotiations that determine the dynamic IPSec SAs.

For a technical consultant to call you click here and they will do so at the time you specify. If you are looking for a quotation or need help designing your solution then click here. If you require access to our SECURE online catalogue then click here.