Executive Summary
ITEC FPX 5030 Assessment 5 The rapid growth of the Internet of Things (IoT) has resulted in an increased demand for robust Internet Protocol (IP) security. Since we are currently working on IPv4, we are also migrating to IPv6, which again increases the demand for improved security mechanisms to protect our systems and data. IP Security (IPSec) is a set of protocols developed by the Internet Engineering Task Force (IETF) that provides data confidentiality, integrity, and authentication between two endpoints over an IP network (Geeks, 2020).
Introduction
The primary aim of this laboratory work was to set up IPsec in order to increase the security of Joe and John’s computers against potential hacking attacks. During the setup, I was introduced to the sophistication of our systems. In addition to switch, router, and workstation configuration, the application of security features to repel unauthorized access formed a part of system configuration. IPsec may be applied over three security domains, namely, virtual private networks (VPNs), application-level security, and routing security, in which it is most commonly employed in VPNs (Thomas & Thomas, 2004).
Scope
Once all the devices are connected to the IoT, safeguarding the entire system is of utmost importance. I accessed each of the switches and workstations individually using Cisco Packet Tracer in order to install IPsec on each of them.
Procedure
Troubleshooting
Conclusion
In this lab, the stations were pre-configured, and I had to install IPsec to prevent any remote access attempt. I started by searching for Joe and John’s IP addresses to ensure system identification. After verifying this, I pinged both computers’ IP addresses for confirmation of connectivity. Upon this, I installed security prompts in the switch to protect their computers. Upon completion of the security settings, I tested the system of the hacker to confirm whether it could invade the network, and the attempt failed.
The lab was difficult, particularly in understanding the pre-configuration of the systems. I had an issue accessing Joe’s command prompt as opposed to John’s, and it created some confusion. Nevertheless, on troubleshooting, I was able to correct the issues and obtained connectivity among the systems.
ITEC FPX 5030 Assessment 5 With the evolution of the IoT and moving towards an IPv6 environment, the need for proper security measures becomes more and more paramount. Security fundamentals of IP security such as Encapsulating Security Payload (ESP) and Authentication Header (AH) provide even stronger protection. ESP offers encryption, data integrity, authentication, and anti-replay protection while AH offers all but encryption. Encryption required depending on the traffic is done by the sending system and verified for sufficient encryption on arrival by the receiving host (Geeks, 2020). We need to put these encryption and security in place to shield our systems against unauthorized access.
References
Geeks. (2020, April 02). IP Security. Retrieved from GeeksforGeeks: https://www.geeksforgeeks.org
ITEC FPX 5030 Assessment 5 Securing the Network and Creating an IPsec Tunnel.
Thomas, J., & Thomas, M. (2004, January 06). How IPsec works, why we need it, and its biggest drawbacks. Retrieved from CSO: https://www.csoonline.com