Outbound and Inbound ESP Field Processing

As with an AH, ESP fields are also processed before being transmitted from the sending computer and on receipt at the receiving computer. The processes implemented for inbound and outbound ESP fields are similar to the processes implemented for AH. However, certain steps have been added to the inbound and outbound processes because of the feature of confidentiality provided by ESP. To start with, when a datagram is sent to the IPSec module in the sending computer, the existence of an SA associated with the datagram is verified. If an SA is not available, a new SA is initialized.

After associating an SA to the datagram, the contents of the datagram are encrypted through a process called packet ...

Get Special Edition Using TCP/IP, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.