Deliver packet to higher layer (eg. TCP, UDP) Process (AH/ESP) Match found ВYРASS Not No match BYPASS found Search security policy database Search Discard packet security association database IP Packet IPSec type Inbound IP packet (from Internet)

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question
Consider the following figure, which depicts the processing of inbound traffic in IPSec gateways.
Deliver packet
to higher layer
(e.g. TCP, UDP)
Process
(АНESP
Match
BYPASS
found
Not
No match
Search
security association
database
Search
ВYPASS
found
Discard
security policy
database
packet
IP
Packet
IPSec
type
Inbound IP packet
(from Internet)
Explain why does the receiver discard the regular IP packets (not IPSec packets) if the security
policy database says that they should be protected (Not BYPASS)?
Transcribed Image Text:Consider the following figure, which depicts the processing of inbound traffic in IPSec gateways. Deliver packet to higher layer (e.g. TCP, UDP) Process (АНESP Match BYPASS found Not No match Search security association database Search ВYPASS found Discard security policy database packet IP Packet IPSec type Inbound IP packet (from Internet) Explain why does the receiver discard the regular IP packets (not IPSec packets) if the security policy database says that they should be protected (Not BYPASS)?
Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY