Answer / jitendera sinha

AH is a protocol that provides authentication.
of either all or part of the contents of a datagram.
through the addition of a header that is calculated,
based on the values in the datagram.
What parts of the datagram are used for the calculation,
and the placement of the header, depends on the mode(tunnelor transport)and the version of IP (IPv4 or IPv6).
tunnel or transport-------
tunel
/\
/ \
/ \
tunel transport
| |
| |
protect all data pkt protect only data portion
now why it is not compatible with nat nat is mechanism.
to hide your personal ip sometime theoretically
it is a mechanism to convert private ip to public ip

___________________________________________________________
*******
The IPsec Authentication Header (AH) is a case in point. AH runs the entire IP packet, including invariant header fields like source and destination address, through a message digest algorithm to produce a keyed hash.
This hash is used by the recipient to authenticate the packet.
If any field in the original IP packet is modified, authentication will fail and the recipient will discard the packet. AH is intended to prevent unauthorized modification, source spoofing, and man-in-the-middle attacks. But NAT, by definition, \
modifies IP packets. Ergo, AH + NAT cannot work.

In the nat Ip filed is modified so some time Ah is not compatible with nat i am again saying SOME time.


Thanku
Hope this will help to understand you the concepts.

Jitendera sinha

How does a switch use store and forward? A.) By using a Class I repeater in a collision domain B.) The LAN switch copies the entire frame into its onboard buffers and then looks up the destination address in its forwarding, or switching, table and determines the outgoing interface C.) By using broadcast addresses as source addresses D.) The switch waits only for the header to be received before it checks the destination address and starts forwarding the packets

2 Answers  

---

How many ports are present in a router?

0 Answers  

---

Tell me how many hop counts are by default and how much you can increase in eigrp protocol?

0 Answers  

---

Can you explain tunneling?

0 Answers   CCIE,

---

Tell me which protocol works only on cisco routers?

0 Answers  

---

Layer 1 and Layer 2 devices must forward a broadcast. Which of the following devices fall into this category? Gateway Switch Router All of the above.

1 Answers   Sutherland,

---

A ISDN BRI circuit can be described as a which of the following? A.) 3B channels B.) 2-64Kbps B channels and 1-16Kbps D channel C.) none of the above D.) 2-64Kbps B channels and 1-16Kbps C channel

1 Answers  

---

Define ios?

0 Answers  

---

How can you measure out exactly 4 litres of water from a tap using a 3 litre and a 5 litre bucket?

7 Answers  

---

Which command do you use to set the Privileged mode password to 'clearwater'? A.) set password=clearwater B.) enable privilege password clearwater C.) enable password clearwater D.) enable login clearwater E.) enable secret password clearwater F.) ebable clearwater

2 Answers  

---

What is the simplest way to remotely configure a router?

0 Answers  

---

What is the mau?

0 Answers  

---