HP 635n Practical IPsec Deployment for Printing and Imaging Devices - Page 43
IKE Phase 1: Authentication, IKE Phase 2: Quick Mode
 |
UPC - 882780301016
View all HP 635n manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 43 highlights
Figure 36 - IKE Phase 1: Authentication IKE Phase 1 is finally finished and now in Figure 37, we can see IKE Phase 2 or Quick Mode started. Figure 37 - IKE Phase 2: Quick Mode Finally, IKE is completed and the SADB is populated on both the initiator and the responder. This entire process will happen once every 8 hours (28800 seconds). Every 1 hour, you'll see an IKE Quick Mode negotiation because the IPsec SAs will have expired (3600 seconds by default on JD). In Figure 38, we can finally see the result of this communication - an ESP packet! 43
-
1 -
2
-
3
-
4
-
5
-
6
-
7
-
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38 -
39 -
40 -
41 -
42 -
43 -
44 -
45 -
46 -
47 -
48 -
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
 |
 |
43
Figure 36 – IKE Phase 1: Authentication
IKE Phase 1 is finally finished and now in Figure 37, we can see IKE Phase 2 or Quick Mode started.
Figure 37 – IKE Phase 2: Quick Mode
Finally, IKE is completed and the SADB is populated on both the initiator and the responder.
This
entire process will happen once every 8 hours (28800 seconds).
Every 1 hour, you’ll see an IKE
Quick Mode negotiation because the IPsec SAs will have expired (3600 seconds by default on JD).
In Figure 38, we can finally see the result of this communication – an ESP packet!