Herramienta para el aprendizaje de IPSEC con énfasis en el uso de MGRE en redes corporativas
No Thumbnail Available
Date
Advisors
Evaluators
Journal Title
Journal ISSN
Volume Title
Publisher
Universidad Industrial de Santander
Abstract
Description
Este artículo presenta la herramienta “IPsec Tools UV”, desarrollada para entender e interactuar de una manera didáctica con las transformaciones que realiza IPsec cuando usa los algoritmos MD5, SHA-1 y 3DES durante la verifcación de integridad y cifrado de un datagrama IPv4. Como ejemplo se presenta la implementación de una red corporativa usando Redes Privadas Virtuales Dinámicas Multipunto, las cuales se basan en el establecimiento de túneles dinámicos protegidos por IPsec. La herramienta fue desarrollada en Java y con el apoyo de otro programa desarrollado fue posible validar el código de los algoritmos MD5 y SHA-1 con 14 vectores de prueba especifcados en la RFC 2202. Además, para mostrar una aplicación de IPsec, se hizo el diseño, confguración, emulación y validación de tres redes privadas conectadas a través de la Internet pública utilizando el software de emulación GNS3.
This paper presents a tool named “UV IPsec Tools”, developed to understand and interact in a didactic way with the transformations performed by IPsec when using the MD5, SHA-1 and 3DES algorithms for the encryption and integrity check of an IPv4 datagram. As an example, we present the implementation of a corporate network using Dynamic Multipoint Virtual Private Networks, which are based on the establishment of dynamic tunnels protected by IPSec. The tool was developed in Java and with the help of another program we developed, it was possible to validate the code for the MD5 and SHA-1 algorithms with 14 test vectors as specifed in RFC 2202. Also, to show an application on IPsec, the design, confguration, emulation and validation of three private networks connected via the public Internet using GNS3 was made.
This paper presents a tool named “UV IPsec Tools”, developed to understand and interact in a didactic way with the transformations performed by IPsec when using the MD5, SHA-1 and 3DES algorithms for the encryption and integrity check of an IPv4 datagram. As an example, we present the implementation of a corporate network using Dynamic Multipoint Virtual Private Networks, which are based on the establishment of dynamic tunnels protected by IPSec. The tool was developed in Java and with the help of another program we developed, it was possible to validate the code for the MD5 and SHA-1 algorithms with 14 test vectors as specifed in RFC 2202. Also, to show an application on IPsec, the design, confguration, emulation and validation of three private networks connected via the public Internet using GNS3 was made.
Keywords
IP security, DMVPN, mGRE, ESP, AH, 3DES, SHA-1, IP security, DMVPN, mGRE, ESP, AH, 3DES, SHA-1