This chapter covers two advanced protocols for TCP/IP called IPsec and IKEv2. IPsec is for “Internet Protocol Security
” and adds authentication and encryption at the Internet Layer. IKEv2 is the Internet Key Exchange protocol
for use with IPsec, and the current version is 2. You can use IPsec without IKEv2 with manual key management, but this is not scalable or particularly secure. Both IPsec and IKEv2 are available for IPv4 and IPv6, but NAT breaks both IPsec itself and IKEv2, so IPsec works far better over ...