Learning tool for IPSEC with emphasis on the use of MGRE in corporate networks

Abstract

This paper presents a tool named “UV IPsec Tools”, developed to understand and interact in a didactic way with the transformations performed by IPsec when using the MD5, SHA-1 and 3DES algorithms for the encryption and integrity check of an IPv4 datagram. As an example, we present the implementation of a corporate network using Dynamic Multipoint Virtual Private Networks, which are based on the establishment of dynamic tunnels protected by IPSec. The tool was developed in Java and with the help of another program we developed, it was possible to validate the code for the MD5 and SHA-1 algorithms with 14 test vectors as specifed in RFC 2202. Also, to show an application on IPsec, the design, confguration, emulation and validation of three private networks connected via the public Internet using GNS3 was made.

Keywords

• IP security
• DMVPN
• mGRE
• ESP
• AH
• 3DES