Question

------------Easy so asked 2 help please no time------------------

A network engineer is asked to configure a "site-to-site" IPsec VPN tunnel. Explain what IKE is and why is it necessary, also fully explain 2 factor authentication for your design as it is required.

List 3 reasons why static routing is less favorably than dynamic in a large enterprise infrastructure?

Answer 1

IKE is nothing but Internet Key Exchange.It is used to set up association i.e., Security Association (SA) in the IPSec protocol suite in a network.

2 factor Authentication- Laptop A sends message in packets to Laptop B which is configured in IPSec protocol, when Laptop A’s IKE negotiates with B.When the negotiations is complete, A and B have the complete security Association (SA).Without IKE security association is not possible between the two devices for Laptop A and B.

The 3 reasons in which the static routing is less favourable than dynamic routing in a large enterprise because -

1. Static routing are not easy to implement in a large network whereas dynamic routing is applicable to all kinds of topologies, also simple to configure in a large network.
2. Static routing cannot reroute traffic if a link fails, whereas dynamic routing automatically adapts topology to reroute traffic whenever possible.
3. static routing is more adoptable for smaller networks wheres dynamic routing requires larger network which will be highly beneficial for larger enterprises.Also it is not much time consuming.Hence larger enterprises tends to go for Dynamic routing.