The IPSec Certification Headal Agreement (IPSec AH) is a major protocol in the IPSec architecture that provides no connection integrity and data source authentication for IP datagrams, and provides protection to avoid replay. Once a secure connection is established, the recipient may choose the latter service. AH provides sufficient certification for IP heads and upper protocol data as possible. However, some IP header fields will change during transmission, and the sender cannot predict the value of this field when the packet reaches the receiving end. AH does not protect this field value. Therefore, the protection of AH is supplied to the IP header is zero.
AH can be used independently or in combination with IP package safety load (ESP) or by using tunnel mode. Between the communication host and the communication host, the communication security gateway and the communication security gateway may provide security services between the security gateway and the host. The ESP provides the same security service and provides a confidentiality (encrypted) service, and the authentication provided by the ESP and AH is hereby different from their coverage. In particular, the IP header fields encapsulated by the ESP are not protected by ESP.
For more information, please visit the following page:
中文:: http://www.networkDictionary.com/chinese/protocols/ah.php
English: http://www.networkDictionary.com/protocols/ah.php
