dvmmPub214

Arup Acharya, Mandis Beigi, Raymond Jennings, Reiner Sailer, Dinesh Verma. IPSECvalidate - A Tool to Validate IPSEC Configurations. In System Administration Conference, (LISA 2001), San Diego, CA, November 2001.

Download [help]

Download paper: Adobe portable document (pdf)

Copyright notice:This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.

Abstract

This paper describes a tool for validating the proper configuration of the IPSEC protocol suite including IKE. The tool validates that two hosts are able to communicate (normal ping functionality) and that this communication is occurring using the proper authen- tication/encryption transformations as required by IPSEC. IPSEC configuration is very complex, and administrators are often unable to determine if a machine configuration is oring the desired protection. IPSEC and IKE operate in a manner transparent toIP applications; an administrator is therefore unable to check the proper operation of an IPSEC "security association" using traditional IP tools

BibTex Reference

@InProceedings{dvmmPub214,
   Author = {Acharya, Arup and Beigi, Mandis and Jennings, Raymond and Sailer, Reiner and Verma, Dinesh},
   Title = {IPSECvalidate - A Tool to Validate IPSEC Configurations},
   BookTitle = {System Administration Conference, (LISA 2001)},
   Address = {San Diego, CA},
   Month = {November},
   Year = {2001}
}

EndNote Reference [help]

Get EndNote Reference (.ref)

For problems or questions regarding this web site contact The Web Master.