Implementation of IPSec Linux Routers

Abstract

IPSec is a framework of open standards for ensuring private communications over IP networks which has become the most popular network layer security control. It can provide several types of data protection: confidentiality, integrity, data origin authentication and access protection. The most common uses is a virtual private network (VPN) which is built on top of existing physical networks that can provide a secure communications mechanism for IP information transmitted between networks. This research seeks to assist organizations in mitigating the risks associated with the transmission of sensitive information across networks by providing practical example on implementing security services based on Internet Protocol Security (IPSec) and show how IPSec can effect on file transferring time through the networks. Implementation of IPSec had been done in a Linux Router in two deferent LANs and the testing result shown that there is an effect in transferring time of the data with a large size. The data analysis gives a leaner equation with a factor of X (the file size) equal (0.20) before IPSec implementation and it increase to (0.21) after IPSec implementation and this increase the time of files transferring through the network.