IPsec: Features

• 2.6 supports IPsec [RFC2401]

• • “XFRM” / stackable destination architecture
  • • Supports both IPv4 and IPv6
  • Many crypto algorithms (cryptoapi)
  • Inter-family IPsec
  • • Helps IPv6 deployment
  • BEET (Bound End-to-End Tunnel) mode

• Many methods for key exchange available

• • IKEv1, IKEv2, KINK