IPSec problems

hackman2007

I'm having difficulty keeping the IPSec facts straight. For some reason my brain refuses to retain the information.

I know it uses protocol ID's 50/51 and an authentication header, but am having trouble remembering the other facts DG mentions about it.

Any suggestions on how to remember this?

Verruckt

Doesn't work through NAT (not completely true but you need it for the test)

Has an authentication header AH and Encapsulating security payload ESP

Is commonly used with L2TP for VPNs

My way to remember all the details is thinking of the entire thing as a subway - L2TP is the tunnel, NAT is the end station, IPSec is the car, and AH / ESP are the security guys along for the ride