Match each VPN framework element on the left with its primary functional purpose on the right.
- Diffie-Hellman (DH) GroupEnables two peer devices to securely derive a shared secret key over an unsecure network.
- Encapsulating Security Payload (ESP)Provides data confidentiality through encryption along with data integrity and authentication.
- Authentication Header (AH)Provides data integrity and origin authentication for IP packets without providing confidentiality.
- Internet Key Exchange (IKE)Establishes a secure control channel and negotiates Security Associations (SAs).
Answer
Diffie-Hellman (DH) Group pairs with deriving shared secret keys over unsecure networks; Encapsulating Security Payload (ESP) pairs with providing confidentiality through encryption along with integrity; Authentication Header (AH) pairs with providing data integrity without confidentiality; Internet Key Exchange (IKE) pairs with establishing control channels and negotiating SAs.
Each IPsec component performs a distinct function: Diffie-Hellman derives shared secret keys over an untrusted link, ESP delivers packet encryption and integrity, AH delivers authentication without confidentiality, and IKE manages negotiation and Security Associations.
Step-by-Step Solution
Key Concept
IPsec Protocol Framework Components