When we studied IP security, we know that sometimes a particular traffic flow calls for end-to-end...

Transcribed Image Text:

When we studied IP security, we know that sometimes a particular traffic flow calls for end-to-end authentication and encryption services provided by both Authentication Header (AH) and Encapsulating Security Payload (ESP). To implement both, we need to combine SAs to form a Security Association (SA) bundle. For the following combination of SAS A Host Local Intranet Tunnel SA Security Gateway F1 Internet One or Two SAS Security Gateway F2 Local Intranet (1) Please draw the original IPv4 packet without IPSec applied. (10 points) Host (2) Please draw a typical IPv4 packet applied a transport SA bundled inside a tunnel SA, with encryption applied after authentication. (20 points) When we studied IP security, we know that sometimes a particular traffic flow calls for end-to-end authentication and encryption services provided by both Authentication Header (AH) and Encapsulating Security Payload (ESP). To implement both, we need to combine SAs to form a Security Association (SA) bundle. For the following combination of SAS A Host Local Intranet Tunnel SA Security Gateway F1 Internet One or Two SAS Security Gateway F2 Local Intranet (1) Please draw the original IPv4 packet without IPSec applied. (10 points) Host (2) Please draw a typical IPv4 packet applied a transport SA bundled inside a tunnel SA, with encryption applied after authentication. (20 points)