Tìm hiểu về giao thức bảo mật IPSEC

IPSEC 2012




 !"#$ !
%&'())%
*+,#$ '!/0

!12#$34
551
'(6&789:;<=:>?@:>A=<@B<CD
%E9F=GHI;J@KL>#M

*'NO
 !"#
$%&$'

IPSEC 2012

()*+,-
>@A:;P?QJ=RST:K@>:CUCV:W9@=:CX=R:CA=R?Y?;Z:;[=R;>Z==@\]
=R9\^=:_?`?J=;>]9:a\?;X=I;Y?=;@9K]R>@A:;P?Qb:C>b=I;@>?Y?;Z:;[=RSc=R
=;d`66`<:-`eeG<:@GI`f9\=;>^=GghiGi@?;X=Rj=
=;d  k_:k9T?BAR>@A  :;P? =g\Qdl?  hm  Bn=R  GgSR>@A:;P?  =]=  :F=R ?o@Sc=R
=:<C=<:

gA:;p>Q>bS:;>q:IqR>@A:;P?=g\`KV=Q]kFASr::;s=R:>=?;d@:;r:hiQdl?
W9@=:tS`BAQJ`?Y?R>@A:;P?:CA=RkT;j9=;dI;s=RQdl?:C@=RkukV:?PR>@A
:;P?=gAV9:Cv?RJ>BwG>Z98``Kg?F?Y?R>@A:;P?P=RBn=RDQdl?Ss:F
?s=RI;@>`k_:Qdl?RJ>:C^=Sc=R`@>?x=R?J:;be;t=:y?;RJ>QbQX?e;j=BwG>Z9
?;P@k^=:CA=R`QJGg?;d@Ib;>Z==@\`?Y??s=R?nk_:Kge;t=:y?;RJ>Qdl?zt\Bi=R
KL>:y=;={=RSc=;Kge;Y:;g=;CT=RC|>>Z?k}h9=R?Y??~?;qkFASr:KgASs;•=;
`k_:Qj9:€R>@A:;P?GgST:=;9?j9?VekY?;<?9C>:\8<?DGgST:R>@A
:;P?Qdl??;9•=;AYk‚>ƒ:€={SMM4=;„SSn?Qy?;=t=R?Ve?Y??~?;qS|;AY
KgzY?:;i?:;s=R:>=?;A?;9…>:;s=R:>=:C9\]=Q>:C^=Sc=Rk„=RR>@A:;P?@\=J>
?Y?;I;Y?`<?Gghi:re;le?o@?Y??;9•=S‚Qdl?:;>q:GreQbQFSkFAhi?•=Sr:
BwG>Z9`QFSkFA:y=;:Ag=K†=BwG>Z9Kg?;P=R:;i?BwG>Z9R>w@?Y?:;>q:kuSc=R<?
?9=R?VeST:?~?V9kFASr:‚:j=R8<:‡ACIG@\<CD?o@Ss;•=;  '

<?Qdl?:;>q:Iq=;de;j=S‚CT=R?o@R>@A:;P?`Qdl?:;i?;>Z=:;[=R=;V:
:CA=R?F;@>e;>^=kF=KKgK*[>KL>K`K>Z?YeBn=R<?GgST::9ˆ?;X=`
=;d=RQ[>KL>K*`R>@A:;P?kFASr:=g\Qdl?:C>b=I;@>k_:k9T?
)%.
<?8=:<C=<:CA:A?AG<?9C>:\DGgST:R>@A:;P?Qdl?ƒe;Y::C>b=
<?Qdl?Qu=;=R;‰@GgST:R>@A:;P?:CA=R:j=RSc=R?9=R?Ve?Y?Bu?;KnkFA
Sr:`=;r=:;i?`:Ag=K†=BwG>Z9KgQ>]9I;>b=:C9\?reJGgST::re;le?Y?:>^9
?;9•=S‚GgSK>Z??a=R=;@9R>w@?Y?e;j=:;>q:ku
!T: ?Y?; ?;9=R =;V:` <? ?;A e;Še ST: Qdp=R =RjS kFA Sr: :;>q: Gre

IPSEC 2012
R>w@Sc=RC>^=RKg=;r=:;i?;@>Qj9?o@Qdp=R=RjS=g\Y?:;>q:kuR>w@;@>

Qj9 Qdp=R=RjS ?J :;b Gg ST: ?‹e ;Ah:` ;A‹? ST: ?‹e ?}=R kFA Sr: 8?J :;b Gg
CA9:<C`Œ>C<‡@GG`kT:re:C9=RD;A‹?ST:?‹e:;>q:kuR•SST:;Ah:KgST:?}=R
kFASr:dp=R=RjSQJ=RK@>:CUGgST:I^=;:C9\]=kFASr:R>w@;@>Qj9Kg?Y?
RJ>BwG>Z9\^9?j9@=:Ag=Qdl?:C9\]=:C^= QJ<??x=R:;i?;>Z=QJ=RRJ>Bw
G>Z9 ?Y? :;s=R :>= Qb :;>q: Gre`B9\ :C• Kg ;o\kŽI^=;:C9\]= I;>I;s=R Ba=R Qq=
=w@Y?RJ>:>=:C9\]=:CA=RQdp=R=RjS?JI;9s=Bc=RR>[=R=;d?Y?RJ>:>=k•=;
:;dp=RI;Y?KgI;s=RGgS:;@\Q}>?Y?:;>q:ku`I>q=:Cv??x=R=;d=;w=RP=RBn=R
;>Z=?J:C^=Sc=R:C9=RR>@=`W9@QJ?;Ae;ŠeR>FSQY=RIb?;>e;yQb:C>b=I;@>Kg
W9F=GH
<? ?J ;@> ?~ ?;q ?~ kF= Qb QFS kFA @= :Ag= Bw G>Z9 QJ Gg 
89:;<=:>?@:>A=<@B<CD Kg  8=?@eh9G@:>=R <?9C>:\ @\GA@BD` :CA=R QJ <?
e;F>;…:ClKg?J:;b;…:Cl

•?;Ae;ŠezY?:;i?=R9•=R[?BwG>Z9`I>bS:C@:y=;:Ag=K†=BwG>Z9Kg
Bu?;Kn:a\?;X=?;[=Re;Y:Gc>?o@?Y?RJ>:C9\]=R>w@;@>;Z:;[=RI;s=R
?9=R?Ve
:y=;kFASr:`Q>]9=g\?J=R;‰@Gg=JRm>Q>:;s=R:>=BdL>Bc=RkF=C•
• Gg ST: R>@A :;P? ?9=R ?Ve :y=; @= :Ag= ?o@ ?Y? RJ> :>= Qdl? :C9\]=
k@AR•S!r:S|BwG>Z9`zY?:;i?=R9•=R[?BwG>Z9`I>bS:C@:y=;:Ag=K†=e;>Iq:
=[>?o@BwG>Z9QFSkFA:y=;kySr:?o@:;s=R:>=:;s=RW9@K>Z?Sr:S|RJ>
:>=V:?FGd9Gd~=RQ]9Qdl?Sr:S|R>w@;@>;Z:;[=RL>Q‹?Q>bS=g\
:;•z9;dL=Rh‘hmBn=R=;>]9;~=Qb:{=R:y=;@=:Ag=?;ABwG>Z9
•F  Kg Gg ?Y? e;d~=R :>Z= ?;A Q>]9I;>b= :C9\ =;re` Bi@ KgA hi
e;t=e;[>?o@?Y?I;J@Sr:S|KgW9F=GH ?Y?G9•=RR>@A:;s=R?JG>^= W9@=Qq=
=;w=RR>@A:;P?@=:Ag==g\

;w=R R>@A:;P?=g\?J:;b Qdl? YeBn=RST: S•=; ;@\Iq:;leKL>=;@9
Qb?9=R?Ve:re?Y?R>@A:;P?@=:Ag=SA=RS9[=:CA=RKKgK*`=;d=R?Y?;
?;v=R?9=R ?Ve ?Y? Bu?; Kn Gg I;Y? =;@9 [> KL> ?F;@> R>@A :;P?  Kg 
=g\`<?I;s=RQu=;?Y?:;9r::AY=@=:Ag=?n:;bQdl?hmBn=R`Sg:;@\KgAQJ
Gg ST: I;9=R?;9•= QbhmBn=R ?Y? :;9r::AY= :;<A:>^9 ?;9•= ?s=R=R;>Ze<?
hm Bn=R ?Y? :;9r::AY= !|=;r=:;i?kF=:>=:C^=?~ h‚k{S8!D` :;9r::AY=
!%8!<hh@R<>R<h:%D`:;9r: :AY= ’ Qb :;i? ;>Z= ?;P? ={=R :Ag= K†= kF=
:>=“;9r::AY=`QbSr:S|BwG>Z9“;9r::AY=I;J@?;>@h”:CdL?`

IPSEC 2012
?;wIHh[KgSr:S|R>Y:Cu=R•9=;>^=8A=?<hDQb=;r=:;i??Y?k^=RAg>
C@ ?Y? ?;9•= ?U= Qu=; =R;‰@ K>Z? hmBn=R?Y?:;9r::AY=I;Y?=;d`-GA‡Œ>h;

Kg<??J:;bhmBn=RR>@A:;P?#8=:<C=<:#<\z?;@=R<DQbzY?:;i?;@>
e;y@KgGgSR>@A:;P?:;d~=RGdl=R?Y??;y=;hY?;kFASr:Kg=;r=:;i?:;s=RW9@
K>Z?zY?Qu=;:;9r::AY=Qdl?Ba=RQb:;>q:GreI^=;:C9\]=`:C@AQ}>I;J@?;AS…>
e;>^=Iq:=[>`Ba=R:CA=RS…>e;>^=:C9\?re!c=RBa=R<?QbkFASr:?Y?BU=R
BwG>Z9?J:;b:iQT=RI>bS :C@:y=;zY?:;i??o@:;>q:kuk„=RR>V\ ?;P=R=;r=h[
?o@ ;@> =Rdp> Ba=R:C@AQ}>:;s=R:>=W9@Gc>>Z?:;d~=RGdl=R=g\?9[>?a=RB•=
Qq=:;>q:GreIq:;le@==>=; 8hD R>w@ ?Y? ?‹e kFA Sr:` Iq: ;le @= =>=; =g\ ?J
:y=;?;V:;@>?;>]9:Ci? :>qe;s=R:>=Iq:;le@==>=;Qdl?Gd9:CA=R?~hmBwG>Z9
G>^=Iq@==>=;`KgS…>Qdl?V=Qu=;ST:h[:;@Sh[@==>=;:CA=RkF=RSn?Gn?
h@A?;AI;>Iq:;leST:Qu@?;–Qy?;KL>R>@A:;P?@==>=;8;A‹?D:;•?JB9\
=;V:ST:
")/01

’;Ae;ŠezY?:;i?;@>?;>]9`:CdL?Kg:CA=RW9Y:C•=;:C9\]=:F>BwG>Z9
’!|;J@Qdp=R:C9\]=R>w@SY\I;>Qdl?Rm>W9@Sc=R
’-FAKZRJ>BwG>Z9Kge;U=R=Ri?Y??9T?:V=?s=RSc=RI;s=RkFASr:
’-gAKZ?Y?Gd9Gdl=Rk„=RK>Z?hmBn=RS|;J@KgQY=;BV9BwG>Z9
’;y=;hY?;?;Ae;ŠeQu=;=R;‰@C@?Y?GAc>Gd9Gdl=RSg<?I>bS:C@Kg?Y?
Gd9Gdl=RQJh‘Qdl?kFASr:KgS|;J@=;d:;q=gA—
$)2!/3%-2!1
$(45678
’#;><?Qdl?:C>b=I;@>:C^=kP?:dp=RGm@;A‹?kTQu=;:9\q=?o@ST:Sc=R
C>^=R:;•:y=;={=R@=:Ag=?o@<??J:;bYeBn=R?;A:Ag=kTKgAC@Sc=RC>^=RQJSg
?Y?:;g=;e;j=I;Y?I;s=R?j=e;F>zmGH:;<S?Y??s=RK>Z?G>^=W9@=:L>kFASr:
’<?Qdl?:;i?;>Z=k^=BdL>GLeKg`Q•=R:;p>=J;Ac:QT=R:CA=Rh9[:

Q[>KL>?Y?GLe=g\AKr\I;s=R?j=e;F>:;@\Q}>e;j=S]S;@\?V9;•=;Gc>?Y?Bu?;
KnI;><?Qdl?:C>b=I;@>

IPSEC 2012
’<??J:;bQdl??V9;•=;Qb;Ac:QT=RST:?Y?;:CA=Rh9[:Q[>KL>?Y?P=RBn=R
Qj9?9[>`Q>]9=g\R>ve?;<BV9=;w=R?;>:>q:?V9;•=;e;P?:ceSg=RdL>B9=Re;F>:;i?
;>Z=I;>Iq:=[>Qq=Sc=R=T>kT:€z@:;s=RW9@>=:<C=<:
$%94:;<5678
’V:?F?Y?RJ>Qdl?zmGH:;<A<?h‘ku:{=RIy?;:;dL?BAe;F>:;^SKgA?Y?
:>^9Q]I;Y?=;@9`KgQ>]9=g\GgS?;A:;s=RGdl=R;>Z9Bn=R?o@Sc=RR>FSz9[=R
V=Q]=g\?J:;bQdl?I;_?e;n?k„=R?Y?;=Š=BwG>Z9:CdL?I;>S|;J@`hA=R?Y?I‰
:;9r:=;dKr\K•=?U=Q@=R=R;>^=?P9Kg?;d@Qdl??;9•=;J@

’<?Qdl?:;>q:Iq?;–Qb;…:ClkFASr:?;AGd9Gdl=R`I;s=R;…:Cl?Y?Bc=R
Gd9 Gdl=R I;Y?
’>Z?:y=;:AY==;>]9R>F>:;9r:e;P?:ce:CA=R<?K•=?U=GgST:KV=Q]I;JQ[>
KL>?Y?:CcSGgSK>Z?KgSY\={=RGi?\q9
’>Z?e;t=e;[>?Y?e;j=?P=RKge;jSS]SSr:S|K•=?U=ku;c=?;qQ[>KL>
?;y=;e;oST:h[W9[?R>@
').2
<??9=R?Ve:y=;={=RS|;AYKgzY?:;i?Sc=;?;AGd9Gdl=RKg?x=R
?9=R?Ve:y=;={=R:C@AQ}>KgGgS:d~>I;AYBi@:C^=?;P=R?;–=;phmBn=R#bQ>
Qq=Iq:G9r=ST:?Y?;:;r=:CX=R`:@e;F>Q]z9V:C„=R=;w=R:y=;={=R=g\Gg?j=:;>q:
R>[=R=;d?Y?:y=;={=RSg+Kg+?9=R?VeCA=Re;j==g\?;v=R:@Gd9HQq=hi
R>[=R=;@9KgI;Y?=;@9?~kF=R>w@<?Kg+KgR>F>:;y?;=;w=Re;cSK>=gAhm

Bn=R?F;@>R>@A:;P?
'(2678=6>?=?9@4=6A@BCDE
’<?Kg+?9=R?VezY?:;i?G><=:Kg<CK<C
’<?Kg+?9=R?Ve:y=;={=RQFSkFA@=:Ag=KgzY?:;i?Q[>KL>BwG>Z9`:;rS?;y
:C^=?Y?SP?I;Y?=;@9?o@?;•=RR>@A:;P?
’<?Kg+?J:;bBa=R?Y?:;9r::AY=Sr:S|Sc=;?;AK>Z?S|;AYKg?Y?;gS
k{S`?J:;bhmBn=RzY?:;i?Bi@:C^=?;P=R?;–
’<?Kg+?9=R?Ve:y=;={=Rh>=;I;AYKgGgS:d~>I;AYSgI;s=Re;F>:C9\]=kV:
IˆI;AY=gABdL>Bc=RC•;@\=RAc>:9\q=
%
IPSEC 2012
'2678F9GC?9@4=6A@BCDE

’+Qdl?:;i?:;>=;dST:R>w@:j=RP=RBn=RKg:j=RKr=:F>“<?Qdl?:;i?:;>
=;dST:I;9=RGgSK>Z?:c>:j=RG>^=Sc=R
’+?9=R?Ve:y=;={=RkFASr::€P=RBn=R’:L>’P=RBn=R8KyBnR>w@˜<k-CA‡h<C
Kg˜<k<CK<CD“<??9=R?Ve:y=;={=RkFASr::€:;>q:ku’:L>’:;>q:ku
’+I;s=RkFAKZGd9Gdl=R“<?:;•?J
’+;Ac:QT=R:€Q>bS?9[>’:L>’Q>bS?9[>KgI;s=R?JI;Y>=>ZSQdp=R;jS>]9
=g\?J:;bGgST:KV=Q]Gv?Gd9Gdl=R?j=Qdl?z<SzŠ:k„=R?Y?;I>bS:C@=T>B9=RKg
W9Š:K>C9h:CdL?I;>=JQdl?e;t=e;[>:;g=;?s=RQq=Qy?;“<??J:;b;Ac:QT=R:;<A
;@>?Y?;`Q>bS?9[>’:L>’Q>bS?9[>Kg=;dST:Qdp=R;jS
’+?J:;bKdl:W9@;A‹?'#`?;v=RBa=RQb?;<BV9?V9:Cv?Qu@?;–k^=
:CA=R;A‹?:CY=;hiz9=RQT:Qu@?;–C>^=R“<?:CA=R?;qQTKr=:F>8<=B™:A’<=BD
I;s=R:;bhmBn=R=;d=R=J?J:;bBa=RST:Qdp=R;jS<?QbQc:Qdl?Sn?

:>^9:d~=R:iKg:;rS?;ykFASr:;~=K•Qdp=R;jS?x=R?J:;bQdl?S|;AY
’Y?P=RBn=R?j=e;F>hm@Q}>QbhmBn=R+>]9=g\?J:;bGgST:KV=Q]Gv?:@
I;s=R:C9\?reQdl?S|=R9•=?o@P=RBn=R;A‹?I;s=R?J:;p>R>@=;@\I>=;=R;>ZS
Qb:;@\Q}>S|=R9•=?o@P=RBn=R“<?;Ag=:Ag=:CA=Rh9[:KL>?Y?P=RBn=R
;s=R:;dp=R+Gg:[:Gv?:@?;–?JST:P=RBn=RQdl?kFAKZKg=JQ|hš=?J:CA=R
ST:e;>^=kF=+’@‡@C<t\Gg:Cdp=R;le?JST:P=RBn=R?;9•=Q@Bc=R`I;s=R?;–
KL>˜<k-CA‡h<CKg˜<k<CK<CRAg>C@`=q9?J:9ˆ?;X=?o@K>Z?:;i?:;>I;Y>=>ZS’
:><Ck„=R?Y?;:r=Bn=R?Y??}=RP=RBn=R˜<k:c>Kg=;Q@>?o@Sc=R`+GgST:hiGi@
?;X=:[:q9?JST:h[Gdl=RGL=?Y?P=RBn=RQbkFAQFS@=:Ag=?J:;be;F>?;X=R>F>
e;Ye:[:;~=?;ASc=RCA=R:Cdp=R;le=g\`<?GghiGi@?;X=:[:;~=C€I;>:i:@
e;Y::C>b=?Y?P=RBn=R`<?S]SB”A;~=+Qb:;i?:;>ST:?;y=;hY?;kFASr:\^9
?j9=;>]9SP?I;Y?=;@9KghiIq:;le?o@zY?:;i?`S|;AYKgQdp=R;jS

*
IPSEC 2012
#)H%IJ&
’8<?9C>:\hhA?>@:>A=hDGgST:I;Y>=>ZS?~kF=:CA=RkTR>@A:;P?<?Gg
ST:Iq:=[>G9r=GH:;<Ae;d~=R;dL=RB9\=;V:R>w@;@>:;i?:;bhmBn=R?Y?Bu?;Kn
<?R•S?J:Cdp=R
•8<?9C>:\@C@S<:<C=B<zDGgST::Cdp=Rk>:hBa=R=;r=Bc=R?Y?R>@A
:;P?kFASr:`Qd~?Qu=;=R;‰@k‚>?Y?:Cdp=R<?9C>:\eCA:A?AG:CA=RkT<?Q@=R
B9=R=;dGge;j=Qj9?o@R>@A:;P?kFASr:Kg:;dp=R?;X=k‚>;Z:;[=RQy?;:CA=R
h9[:W9Y:C•=;:;Ž@:;9r=?o@
•<h:>=@:>A=@BBC<hhQu@?;–?o@=v:Qy?;~?;qW9F=GH?a@?;–Qdl?
Qu=;=R;‰@?;A;Z:;[=R9=>?@h:S‹?Ba=J?J:;bGg;Z:;[=RkCA@B?@h:`9=>?@h:;@\

S9G:>?@h:
•<?9C>:\eCA:A?AG“Ss:FR>@A:;P?kFASr:<?`Gg;A‹?:CA=R
<?Qdl?:C>b=I;@>:;<A?;qQT:C@=heAC:SAB<Kg:9==<GSAB<
0
IPSEC 2012

()%
((K?=L4@?
Hình:#>q=:Cv?R>@A:;P?
€I;>?s=R=R;Z>eh<?C@Qp>`=JI;s=R?;–?U=Qdl?k>q:Qq==;dST:?;9•=>=:<CC=<:
Q~=G‘=w@`Sg;~=:;q=w@?U=Qdl?Qu=;=R;‰@:CA=R?;9•=ƒ`Qdl?IbQq=:CA=R
kF=Rh@9

4
IPSEC 2012
’#>q=:Cv?<?E9\Qu=;?Y??V9:Cv?`?Y?I;Y>=>ZSKg\^9?j9?o@<?
’>@A:;P?GgST:R>@A:;P?Sr:S|KgzY?:;i?:;s=R:>=:CA=R<?
’>@A:;P?GgR>@A:;P??;P?={=RRj=R>[=R;dKr\I;>:C>b=I;@><?`
=Rdp>hmBn=R?J:;b?;X=Ba=R;A‹?`S…>R>@A:;P??Jd9Kg=;dl?Q>bSC>^=R
’;9r::AY=Sr:S|u=;=R;‰@?Y?:;9r::AY=S|;AYKgR>F>S|hmBn=R:CA=R<?
<??;o\q9Bi@KgA?Y?:;9r::AY=S|;AYQ[>zP=R
’;9r::AY=zY?:;i?u=;=R;‰@?Y?:;9r::AY=zY?:;i?:;s=R:>=hmBn=R:CA=RKg

’E9F=GHI;AY!s:F?Y??~?;qW9F=GHKg:C@AQ}>I;AY:CA=R<?
’!>]=:;i?:;>8AS@>=AŒ=:<CeC<:@:>A=™'Du=;=R;‰@Ss>:Cdp=R:;i?:;><?

<?I;s=Re;F>GgST:?s=R=R;ZC>^=Rk>Z:SgGghi:};le?o@=;>]9?~?;q`R>@A
:;P?KgI›:;9r:I;Y?=;@9`:CA=RQJS…>R>@A:;P?`?~?;qQ]9?J=;>]9?;qQT;Ac:
QT=RI;Y?=;@9>Z?zY?Qu=;ST::re?Y??;qQT?j=:;>q:Qb:C>b=I;@><?:CA=RST:
M
IPSEC 2012
:•=;;9[=R?n:;bGg?;P?={=R?o@S>]=:;i?:;>6Š:K]S‹:P=RBn=R`<?:;i??;V:Gg
ST:R>@A:;P?;Ac:QT=RhA=RhA=RKL>=;„S?9=R?Ve?;P?={=R?~kF=Sg
=R9\^=:;9œ?;d@?J`QJGgS|;AYKgzY?:;i?RJ>BwG>Z9!T:?Y?;I;Y>W9Y:?J:;b
z<S<?GgST::};leR•S;@>:;g=;e;j=
’>@A:;P?QJ=RRJ>`R•SKg
’>@A:;P?:C@AQ}>I;AY#8=:<C=<:#<\z?;@=R<D
(GCMNC9DOCP@BC

• E9F=GH:C9\z9V:8@??<hh?A=:CAGD
• Ag=K†=BwG>Z9‚?;qQTI;s=RIq:=[>8?A==<?:>A=G<hh>=:<RC>:\D
• 6Y?:;i?=R9•=R[?BwG>Z98B@:@AC>R>=@9:;<=:>?@:>A=D
• ;[=Re;Y:Gc>8@=:>’C<eG@\D
• !|;AYBwG>Z98<=?C\e:>A=D
• -FASr:BU=RGd9Gdl=R8:C@ŒŒ>?ŒGA‡?A=Œ>B<=:>@G>:\D
>Z??9=R?Ve?Y?Bu?;Kn=g\:CA=R:€=R:•=;;9[=R?n:;be;n:;9T?KgAR>@A:;P?
QJ=RRJ>Qdl?Ba=RGg;@\;<AQJ=q9R>@A:;P?Qdl??;X=Gg:;•?Y?Bu?;
KnS|;AYKgkFASr:BU=RBwG>Z9h‘I;s=RQdl??9=R?Ve
•
IPSEC 2012
)2QQ1

GCF674RSMO?=>Z=:c><??J;@>?;qQTGgSK>Z?C@=heAC:!AB<Kg9=<G
!AB<FKgQ]9?J:;bGgSK>Z?KL>ST::CA=R;@>?;qQT=g\
a. Kiểu Transport:
 C@=heAC:SAB<?9=R?Ve?~?;qkFAKZ?;ABwG>Z9?o@?Y?GLe?@A;~=
8`;A‹?!DCA=RC@=heAC:SAB<`e;j=<?;<@B<CQdl??;ž=KgA
R>w@e;j=;<@B<CKge;j=;<@B<C?o@R>@A:;P?:j=R:C^=`Kgh‘Qdl?Q‹:
h@9;<@B<C=R9\^=:;o\•Kr\?;–?J:F>8e@\GA@BDGgQdl?S|;J@Kg;<@B<C
k@=Qj9GgQdl?R>w=R9\^=K†=C@=heAC:SAB<?J:;bQdl?Ba=RI;>?F;@>;Ah:;…

IPSEC 2012
:Cl<?;qQT:C@=heAC:=g\?J:;9r=Gl>Gg?;–:;^SKgAKg>k\:<h?;AS…>e@?I<:h
Kg=J?x=R?;Ae;Še?Y?:;>q:ku:C^=Sc=R:;V\Qdl?Qu@?;–Qy?;?9[>?a=R?o@RJ>

#;F={=R=g\?;Ae;Še?Y?:Y?KnzmGHQ‹?k>Z::C^=?Y?Sc=R:C9=RR>@=Bi@:C^=?Y?
:;s=R:>=:CA=R;<@B<C9\=;>^=?Y?:;s=R:>=+@\<Ch‘kuS|;J@`GgSR>L>;c=
I;F={=RI>bS:C@?o@RJ>
•=;e‚I>b9:C@=heAC:
b. Kiểu Tunnel:
#>b9=g\kFAKZ:Ag=kTRJ>J>k@=Qj98k@AR•S?F;<@B<CDQdl?
zY?:;i?;A‹?Sr:S|@9QJ`RJ>Q|S|;J@Qdl?QJ=RRJ>KgAST:;<@B<C
SL>u@?;–k^==RAg>Qdl?hmBn=R?;AQu=;:9\q=RJ>:C9\]=W9@=:<C=<:
CA=RI>b99==<G`:Ag=kTRJ>k@=Qj9Qdl?QJ=RRJ>Kg:C‚:;g=;
@\GA@B?o@RJ>SL>#>b9=g\?;Ae;Še?Y?:;>q:kuSc=R=;dCA9:<C:;i?;>Z=
zmGH<?:;@\?;A?Y?:CcS?9[>8;Ah:D
")T.  U4<9B?< 6C@ 


<6V? 

 B@ 

MB

WX
"(6Y6<96Z4
?9=R?VezY?:;i?=R9•=R[?BwG>Z98B@:@AC>R>=@9:;<=:>?@:>A=D`I>bS:C@
:y=;:Ag=K†=BwG>Z98B@:@>=:<RC>:\D`KgBu?;Kn?;[=Re;Y:Gc>8@=:>’C<eG@\
h<CK>?<Dq=Qt\`?j=e;F>e;t=k>Z:Qdl?;@>I;Y>=>ZS:Ag=K†=BwG>Z9Kg?;[=R

e;Y:Gc>:Ag=K†=BwG>Z9GgI>bS:C@=;w=R:;@\Q}>?o@:€=RRJ>:>=`I;s=RW9@=
:tSQq=Ku:Cy?Y?RJ>:CA=RG9•=RGd9Gdl=R“?U=Bu?;Kn?;[=Re;Y:Gc>GgI>bS:C@
hie;Y:G‹eGc>ST:RJ>:>=:L>Qu@?;–Qy?;=;>]9;~=ST:Gj=?;Ae;ŠezY?:;i?
?Y?:Cdp=R?o@;<@B<C?x=R=;dBwG>Z9?o@?Y?R>@A:;P?GLe:C^=`:9\=;>^=BA

IPSEC 2012
ST:h[:Cdp=R?o@;<@B<C:;@\Q}>:CA=RI;>:C9\]=Kge;y@e;Y:?J:;bI;s=RBi
QAY=:CdL?Qdl?R>Y:Cu?o@?;v=RI;>:L>e;y@:;9`BAQJR>Y:Cu?o@?Y?:Cdp=R=g\
I;s=RkFAKZQdl?k„=RJ:;b=J>?;–kFAKZST:e;j=?o@;<@B<CSg
:;s>I;s=R?9=R?VekV:?PzmGH=gAK]kFASr:BwG>Z9?o@?Y?GLe:C^=`:V:
?FQ]9Qdl?:C9\]=BdL>Bc=RK{=kF=C•=;@=;;~=`=^=?J:;b?;X=
:CA=R:Cdp=R;le?;_??;_=K]=R9•=R[?Kg:y=;:Ag=K†=?o@BwG>Z9=;d=R:y=;

kFASr:BwG>Z9I;s=R?j=Qdl??;_??;_=
>@A :;P?  ?9=R ?Ve ?;P? ={=R zY? :;i? k„=R ?Y?; :;i? ;>Z= ST: ;gS
k{SST:?;>]98A=<’‡@\;@h;Œ9=?:>A=DQ[>KL>BwG>Z9?o@RJ>Qb:cAC@ST:QAc=
S| zY?:;i? 8;@h; ;@\S<hh@R<B>R<h:D Ac= S|QJ Qdl? ?;ž=KgA:;s=R :>=?o@
RJ>:C9\]=Q>#;>QJ`kV:?P:;@\Q}>=gAQ[>KL>=T>B9=R?o@RJ>:CA=RW9Y:C•=;
:C9\]=Q>Q]9 Qdl?e;y@:;9e;Y:;>Z=I;>=J:;i?;>Z=?a=RKL>ST:;gSk{SST:
?;>]9Q[>KL>RJ>BwG>Z9:;9Qdl?KgQ[>?;>q9=JKL>R>Y:Cu;@h;Q|:C9\]=Q>gS
k{SQdl?:;i?;>Z=:C^=:Ag=kT RJ> Bw G>Z9` :C€ ST: h[ :Cdp=R :CA=R  ;<@B<C ?J
R>Y:Cuku:;@\Q}>:CA=RW9Y:C•=;:C9\]=Sge;y@:;9I;s=R:;bBiQAY=:CdL?Qdl?
8Ky Bn :Cdp=R :;p> R>@= h[=R ?o@ RJ>:>=ku ?Y? CA9:<C:;@\ Q}> :C^= Qdp=R :C9\]=
B•=D
II.3.2.Cấu trúc gói AH:

•’0k>: 4’%k>: *’k>: ’k>:
<z:;<@B<C @\GA@BG<=R:; 
<?9C>:\e@C@S<:<Ch>=B<z8D
<W9<=?<=9Sk<C
9:;<=:>?@:>A=B@:@8K@C>@kG<D
Hình:>@A;P?
Ý nghĩa của từng phần:
Ÿ<z:<@B<C8:>^9Q]:>qe:;<ADJQTBg>4k>:Qb=;r=Bc=RGAc>BwG>Z9
?o@e;j=:F>:>=:;<Ah@9>Y:Cu=g\Qdl??;X=Gi@:€:re?Y?h[R>@A:;P?
Q|Qdl?Qu=;=R;‰@:CA=R?Y?ƒRj=Qt\=;V:

IPSEC 2012

Ÿ@\GA@BG<=R:;8QTBg>:F>:>=DJQTBg>4k>:Kg?;P@QTBg>?o@:>^9Q]
Qdl?B> =:F:CA=R?Y?:€k>:`:C€yBn:CA=R:Cdp=R;le?o@:;9r::AY=
:Ag=K†=Sg S@=RGc>ST:R>Y:Cu zY?S>=;M*k>:8zk>:D` ?T=RKL>:€k>:
Q| ?[ Qu=;`:Cdp=R QT Bg> =g\ ?J R>Y :Cu Gg  L> K*` :}=R QT Bg> ?o@ :>^9 Q]
e;F>GgkT>?o@?Y?I;[>4
Ÿ<h<CK<B8Bi:CwDCdp=R*k>:=g\Bi:Cw?;AP=RBn=R:CA=R:d~=RG@>
Ÿ<?9C>:\@C@S<:<Ch=B<z8?;–B•=:;s=Rh[@==>=;DCdp=R=g\?J
QTBg>k>:`S@=R:y=;?;V:k_:k9T?
Ÿ<W9<=?<9Sk<C8h[:;P:iD t\Gg:Cdp=Rk>:I;s=RQY=;BV9?;P@
ST:R>Y :Cu Sg I;> S…> RJ> Qdl? Rm> Q> :;• :{=R ST: Gj= Cdp=R =g\ ?J :y=; k_:
k9T? -^=Rm>G9s=G9s=k@AR•S:Cdp=R=g\=R@\?FI;>k^==;r=I;s=RhmBn=R
Bu?;Kn?;[=Re;Y:Gc>-TQqSk^=Rm>Kg=;r=Qdl?I;‚>:cAk@=Qj9Gg•`RJ>Qj9

:>^=?Jh[:;P:iGg
q9Bu?;Kn?;[=Re;Y:Gc>Qdl?hmBn=R`?;–h[=g\I;s=R:;bG‹eGc>`h‘?JST:
\^9?j9 Iq: :;v? e;>^=:C9\]=:;s=RKg  h‘ Qdl? :;>q: Gre SL> :C‚ Gc> :CdL? I;>
:C9\]=

RJ>SL>
Ÿ9:;<=:>?@:>A= @:@ 8Bw G>Z9 =;r= :;i?D U= Qdl? RX> Gg  8=:<RC>:\
;<?I@G9<R>Y:CuI>bS:C@:y=;:Ag=K†=D?JQTBg>:;@\Q}>`k„=Rh[=R9\^=Gj=
?o@k>:Q[>KL>KKg*k>:Q[>KL>K*`Kg?J:;b?;P@QZSQbGVeQj\?;AQo
Gg kT>h[?Y?k>: =;d :C^=  Qdl? :y=; :AY= hm Bn=R :;9r: :AY= =;r= :;i?` k@A
R•S S|=;r=:;i?kF=:>=8!<hh@R<9:;<=:>?@:>A=AB<!hD!hQ~=R>F=
?J:;bGg:;9r::AY=S|;J@!%;A‹?’Y?I;J@Ba=R?;AS|;J@Gg?Y?

I;J@zY?:;i?kySr:Qdl??;>@h”R>w@?Y?e;j=:C9\]=:;s=R?J:;bGgST:h[=R•9
=;>^=`I;s=Re;F>GgST:?;9…>?J:;bQAY=:CdL??o@kV:?PGAc>=gAy=;:AY=
Qdl?:;i?;>Z=hmBn=RRJ>:>=SL>Qd@ KgA -V: I• :Cdp=R ?J :;b k>q= Q}> ?o@ 
;<@B<C=gAQ]9Qdl??g>Q‹:k„=R•`BwG>Z9GLe:C^=Qdl?R>FhmGgI;s=R:;bk>q=
Q}> !…> k^= :c> Qj9 ?9[> ’ :y=; :AY= =g\ QT? Gre q9  :y=; :AY=
Qdl?‚e;y@:;9KgQdl?e;y@e;Y::C9\]=Qq=I;>hAhY=;KL>=;@9SgI;s=R
e;a;le:;•RJ>:>=kuGAc>kŽ`k„=R?Y?;=;dKr\h‘QFSkFAC„=RRJ>:>=I;s=RkuR>F
S|A
""[4G<W\?9]S^_
Ac:QT=R?o@Qdl?:;i?;>Z=W9@?Y?kdL?=;dh@9
I`YC(Ag=kTRJ>8k@AR•S;<@B<CKg:F>:>=DQdl?:;i?;>Z=W9@


IPSEC 2012
ST:;gSk{SST:?;>]9
I`YC!|;@h;:;9Qdl?Ba=RQbzt\Bi=RST:;<@B<C`Qd@;<@B<C=g\
KgARJ>BwG>Z9k@=Qj9
I`YC"J>BwG>Z9h@9I;>:;^S;<@B<CQdl?:C9\]=:L>Q[>:Y?<?
I`YC$-^=:;9:;i?;>Z=;gSk{SKL>;<@B<CKg:F>:>=`Iq:W9F:;9
Qdl?ST:S|;@h;
I`YC'-^=:;9:Y?;S|;@h;:CA=R;<@B<C
I`YC# -^=:;9 hAhY=;S|;@h;Sg=J:y=;Qdl?SgS|;@h;:Y?;C@ :€
;<@B<C@>S|;@h;=g\e;F>;Ag=:Ag=R>[=R=;@9q9I;Y?=;@9?;–
ST:k>::CA=RW9Y:C•=;:C9\]=:;•S|;@h;h‘I;s=RR>[=R=;@9`k^=:;9Gre
:P?e;Y:;>Z=:y=;I;s=R:Ag=K†=?o@BwG>Z9

""(/N<WaCP@
?J;@>I>b9;Ac:QT=R`QJGgI>b9C@=heAC:KgI>b99==<G#>b9C@=heAC:Gg
I>b9 Qj9 :>^= Qdl? hm Bn=R ?;A Iq: =[> Qj9 ?9[> R>w@ ?Y? ;Ah: ;A‹? ?Y? :;>q: ku
;Ac:QT=R=;d;Ah:KgI>b99==<GQdl?hmBn=R?;A?Y?P=RBn=R?U=Gc>
¡I>b9C@=heAC:?;Ae;ŠekFAKZ?Y?R>@A:;P?GLe:C^=`?a=RKL>ST:h[:Cdp=R
:CA=R  ;<@B<C CA=R I>b9 =g\`  Qdl? ?;ž= KgA h@9  ;<@B<C Kg :CdL? ST:
R>@A:;P? GLe:C^=8?;¢=R;c==;d``!fDKg:CdL??Y?<? ;<@B<C
Q|Qdl??;<=KgA[>KL>K`Q‹:h@9;<@B<CKg:CdL?R>@A:;P?GLe:C^=8Ky
Bn‚Qt\GgD[>KL>K*`Qdl?z<S=;de;j=:F>Qj9?9[>’:L>’Qj9?9[>`
=^=h‘z9V:;>Z=h@9?Y?e;j=;<@B<CS‚CT=R;Ae’:A’;Ae`CA9:>=RKgŒC@RS<=:@:>A=
Y?Gi@?;X=Qy?;
8B<h:Ae:>A=h<z:<=h>A=;<@B<ChD?J:;b:CdL?;A‹?h@9

Hình:
#;9s=Bc=RK:CdL?Kgh@9I;>zmGH‚I>b9C@=heAC:
%
IPSEC 2012
Hình:#;9s=Bc=RK*:CdL?Kgh@9I;>zmGH‚I>b9C@eAC:
CA=R I>b9 9==<G` >==<C  ;<@B<C S@=R Qu@ ?;– =R9•= Kg Qy?; ?9[> ?a=R` ?U=
A9:<C  ;<@B<C S@=R Qu@ ?;– Qb Qu=; :9\q= W9@ =:<C=<: CA=RI>b9 =g\`  kFA
KZ:Ag= kT RJ> :>=  k^= :CA=R` k@A R•S ?F >==<C  ;<@B<C 8:CA=R I;> 
C@=heAC: ?;–kFAKZST:h[:Cdp=R?o@;<@B<CDAKL>A9:<C;<@B<C:;•Ku:Cy
?o@R>[=R=;d
:CA=RI>b9C@heAC:
Hình:#;9s=Bc=RRJ>:>=Q|zmGH‚I>b99==<G

""GC<94b<<VG?]GC<9cC
;9r::AY=zY?:;i?hmBn=RQb:y=;Qdl?zY?Qu=;k‚>Iq:;le@==>=;
8<?9C>:\hhA?>@:>A=D[>KL>:C9\]=:;s=RQ>bS:L>Q>bS`?Y?:;9r::AY=zY?:;i?
:;y?;;lek@AR•S?Y?;gSk{SST:?;>]98!%`’Dt\?;y=;Gg=;w=R:;9r:
:AY=k_:k9T?SgST:P=RBn=Re;F>;…:Cl
"""TS^_=d65e4W@
CA=RI>b9C@=heAC:`e;y@e;Y:?;ž=;<@B<CKgAh@9;<@B<CKg:CdL?ST:
;<@B<C?o@R>@A:;P?GLe:C^=CA=RI>b99==<G`?J:;^Shiz9V:;>Z=?o@A9:<C
*
IPSEC 2012
;<@B<CE9Y:C•=;zmGHRJ>:>=Qj9C@=;dh@9
•SI>qSQdl?:;i?;>Z=:C^=RJ>:>=Qj9C@?;–I;>W9Y:C•=;<?Q|zY?

Qu=; Qdl?RJ>:>=QJ Qdl?G>^= Iq: KL>ST:QJ h‘\^9 ?j9zmGHRJ> :>=
>Z? zY? Qu=; W9Y :C•=; zm GH <? =gA ?j= :;i? ;>Z= :C^= Gd9 Gdl=R Qj9 C@ ?J :;b
z<S:CA=Rƒ•
•cAkTQqSe;y@e;Y:Qdl?I;‚>:cA•I;>ST:Qdl?:;>q:Gre
;y@ e;Y: :{=R  ?;A  =g\ Kg ?;ž= R>Y :Cu  QJ KgA :Cdp=R <W9<=?<
9Sk<C q9Bu?; Kn @=:>’C<eG@\ 8?;[=R e;Y: Gc>D Qdl? Gi@ ?;X=` e;y@ e;Y:
I>bS :C@ Qb QFS kFA kTQqSI;s=RkuG‹eGc>:CdL?I;>?;ž=ST:R>Y:CuSL>
q9Bu?;Kn@=:>’C<eG@\I;s=RQdl?Gi@?;X=:;•e;y@e;Y:I;s=R?j=R>YShY:
Qq=`:9\=;>^==JK•=Qdl?:{=R?;AQq=I;>
W9@\:C‚Gc>•
•y=;:AY=k„=R?Y?;hmBn=R?Y?:;9r::AY=`e;y@:;9h‘:y=;:AY=
Gc>‚e;y@:;9KghAhY=;=JKL>R>Y:Cu?J:CA=RQbW9\q:Qu=;:L>I;F

={=R:•=:c>?o@RJ>:>=QJ
•;ž=BwG>Z9?J;@>Bc=R?;ž=BwG>Z9 :CA=R` QJGg ?;ž=BwG>Z9
zY? :;i? 89:;<=:>?@:>A= @:@  @BB>=RD Kg ?;ž= RJ> =RjS Qu=; 8SeG>?>:
@?I<: @BB>=RD [>KL> ?;ž= Bw G>Z9 zY? :;i?` =q9 Qj9 C@ ?o@ :;9r: :AY=
zY?:;i?Gg kT>h[?o@M*k>::;•I;s=RQdl??;ž=9\=;>^==q9?JIy?;
:;dL?I;Y?:;•K>Z??;ž=:;^SBw G>Z9Gg?j=:;>q:T>B9=R?o@e;j=BwG>Z9
?;ž= Gg :a\ H` ?x=R?JS‹::CA=R e;Še :y=;  KgQdl? :C9\]= Q> ;ž= RJ>
=RjSQu=;Qdl?hmBn=RI;>:;9r::AY=zY?:;i?\^9?j9:y=;Ggh[=R9\^=
?o@ST:I;[>kk\:<=gAQJKg=q9QTBg>RJ>I;s=R:;Ž@S|=Q>]9I>Z= QJ
:;•?;ž=RJ>=RjSQu=;Qdl?:;i?;>Z=‚e;y@?9[>?o@RJ>:CdL?I;>:y=;
Y?k\:<?;ž==g\?JR>Y:CuGg•KgI;s=RQdl?:C9\]=Q>?a=RKL>RJ>
•;t=SF=;I;>?j=:;>q:`e;t=SF=;h‘Qdl?:;i?;>Z=h@9I;>Q|zm

GH•Kr\:CA=RI>b9:C@=heAC:?;–Qdl?:;i?;>Z=:C^=:Ag=kTRJ>`
I;s=R:;i?;>Z=:C^=:€=RSF=;q9kF=:;t=RJ>Q|W9@zmGHkue;t=
SF=;:C^=Qdp=R:C9\]=:;•‚e;y@:;9e;F>Qdl?R;ŠeGc>:CdL?I;>zmGH¡
I>b99==<G`?J:;b:;i?;>Z=:C^=RJ>Sge;j=:F>:>=GgST:RJ>e;t=
SF=;
0
IPSEC 2012
Hình:;t=SF=;Kg?;P=R:;i?SAB<:C@=heAC:;Ah:’:A’;Ah:
•=;;t=SF=;Kg?;P=R:;i?SAB<9==<GR@:<‡@\’:A’R@:<‡@\
4
IPSEC 2012
""$TS^_=d65e4DEV

#;>=;r=Qdl?ST::;s=RQ>Ze?J?;P@`W9Y:C•=;zmGy>e:CdL?:>^=h‘:[=R
;le?Y?e;t=SF=;:;g=;:;s=RQ>Ze;Ag=?;–=;@9QJ:;s=RQ>Ze=g\h‘Qdl??;9\b=
:L>W9Y:C•=;zmGyE9Y:C•=;=g\R•S?Y?kdL?=;dh@9
I`YC(6Y?Qu=;>=kA9=B:d~=RP=R:CA=R-dL?=g\Qdl?:;i?
;>Z=Bi@:C^=?Y?:;s=Rh[`Qu@?;–=R9•=`R>@A:;P?:d~=RP=RI>bS:C@
:CA=RRJ>QbzY?Qu=;z<SSAB<=gAQdl?YeBn=R:C@=heAC:SAB<;@\:9==<G
SAB<;@\?F;@>J>?x=Re;F>?9=R?VeST:h[
:;s=Rh[QbR>L>;c=:jS:Y?QT=R?o@8KyBneAC:;@\eCA:A?AGDq9Qt\Gg
:9==<G;<@B<Ce;F>hAhY=;?Y?:;s=Rh[=g\:CA=Re@?I<C>==<CK•?Y?:;s=Rh[
=g\I;s=RQdl?h@A?;Šeh@=R:9==<G;<@B<C#;>e;a;leQdl?:•S:;V\`W9Y
:C•=;Qdl?:>qe:n?`=Rdl?Gc>RJ>:>=h‘ku;o\kŽ
I`YCq9?;P?={=R?;[=Re;Y:Gc>Qdl?Iy?;;Ac:`e;y@z9V:e;Y:?o@

RJ>:>=G9s=:{=Rh[QqS?;[=Re;Y:Gc>-^==;r=?J:;bkŽW9@;A‹?hmBn=R
?;–h[=g\Qb?;[=Re;Y:Gc>9\=;>^=R>@A:;P?I;s=RQFSkFAC„=R:C•=;:i
?o@?Y?RJ>I;>Qq=k^==;r=R>[=R=;d:C•=;:i?Y?RJ>Gv??;v=RQdl?Rm>Q>A
QJ?;–h[=g\I;s=R:;bBa=RQbzY?Qu=;:;P:i?o@?Y?RJ>:>=9\=;>^=?;–h[
=g\K•=?J:;bhmBn=RQbzY?Qu=;S[>G>^=;ZK]:;P:iKL>ST:?m@h}?J?;>]9
Bg>Gg
kT>h[?o@k>:h[>KL>S…>>=kA9=B`Gd9:CwST:?m@h}?;[=Re;Y:
Gc>#y?;:;dL??o@?m@h}GgkT>h[?o@k>:hKL>R>Y:CuS‹?Qu=;Gg*k>:h!T:
?m@h}?;[=Re;Y:Gc>?JIy?;:;dL?I>bShAY:h<W9<=?<=9Sk<C?o@:;s=R
Q>ZeQdl?=;r=Rj==;V:-V:?P:;s=RQ>^e=gA?Jh<W9<=?<=9Sk<C=;Ž;~=
S>]=R>Y:Cu?o@?m@h}e;Y:Gc>Qb9ku;o\kŽY?:;s=RQ>Ze?Jh[h<W9<=?<
=9Sk<CQ|:•=:c>:CA=R?m@h}e;Y:Gc>?x=Rku;o\kŽ!T:k>:S@hI8;A‹?ST:

?V9:Cv?:d~=R:iDQdl?hPBn=RQbI>bShAY:h<W9<=?<=9Sk<C?o@:;s=RQ>Ze
Qdl?=;r=Rj==;V:Q[>KL>=g\-@=Qj9ST:k>:’S@hI*ky:?J:;bR>YShY:
h<W9<=?<=9Sk<C?o@?Y?:;s=RQ>Ze?Jh<W9<=?<=9Sk<C=„S:CA=RQAc=`
*!T:I;>z9V:;>Z=ST::;s=RQ>Ze?Jh[h<W9<=?<=9Sk<CGL=;~=*8KyBn
0•D`k>:’S@hIh‘Bu?;?;9\b=QbR>YShY:?Y?h[h<W9<=?<=9Sk<C:CA=RQAc=00•
AQJ=Jh‘;o\kŽ?Y?:;s=RQ>Ze?Jh<W9<=?<=9Sk<C=;Ž;~=0`;A‹??Y?:;s=R
M
IPSEC 2012
Q>Ze?Jh[h<W9<=?<=9Sk<CQ|z9V:;>Z=:CA=R?P@h}?;[=Re;Y:Gc>;•=;BdL>
Qt\S>=;;X@;Ac:QT=R?o@?m@h}?;[=Re;Y:Gc>
I`YC" #>bS:C@:y=;zY?:;i??o@BwG>Z9gSk{SQdl?:y=;:AY=
:d~=R:i=;dBwG>Z9Qj9C@q9Iq:W9F:y=;I;s=R:Ca=RKL>:CA=R:;s=R

Q>Ze:;•;o\kŽ:;s=RQ>Ze`=Rdl?Gc>h‘?;9\b=h@=RR>@>QAc=:>qe:;<A
I`YC$+Ac>kŽKg:>qe:n?W9Y:C•=;zmGy?;A?Y?e;j=?U=
Gc>?o@:>^9Q]q9?JST:=<h:<B;<@B<Cz9V:;>Z=:c>Qy?;Qq=
=g\!…>;<@B<C?j=e;F>Qdl?zmGy?;AQq=I;>ST::CA=R;@>Q>]9I>Z=Qdl?:;Ž@
S|=#;>>eh<?;<@B<C?9[>?a=RQ|Qdl?zmGy:;g=;?s=RKgW9Y:C•=;zmGy:>qe
?r=Qq=?Y?eCA:A?AG?o@GLe:C^=RJ>:>=Qdl?Rm>Qq=?;9:C•=;zmGyRJ>>e:>qe
:n?B>?;9\b=:CA=R:j=R>eCA=R:Cdp=R;leI;Y?`=q9W9Y:C•=;zmGy:>qe?r=KL>
ST::9==<G>e;<@B<CSgQy?;Qq=I;s=Re;F>Gg;Ah:=g\:;•:;s=RQ>ZeQdl?
?;9\b=Qq=;Ah:e;a;le:c>QJ?Y?R>@>QAc=:>qe:;<A?o@W9Y:C•=;zmGy
Qdl?B> =C@
I`YC'#>bS:C@:CA=RQbQFSkFAC„=R?Y?>eh<?eAG>?\YeBn=R
KL>:;s=RQ>Ze:C^=:;Ž@S|=;Z:;[=R?Y?eAG>?\\^9?j9>@>QAc=W9@=:CX=R

=g\CV:I;JS>=;;X@:CA=R:Cdp=R;leW9Y:C•=;zY?:;i??;–hmBn=RS•=;
!T:KyBn?JhP?:;9\q:e;n??@A;~=I;>?;v=R:@:>qe:n?:•S;>b9ST:GAc>
:>^9Q]kFASr:I;Y?`
$)--,UX
$(6Y6<96Z4
x=R =;d` R>@A :;P?=g\Qdl?e;Y::C>b= ;Ag=:Ag=?;A <? >@A:;P?
=g\ ?9=R?Ve:y=;kySr: BwG>Z9k„=RK>Z?Sr:S| ;J@?Y?RJ> :>=;^SKgA QJ`
 ?x=R ?9=R?Ve =;r= :;i? =R9•= R[? Bw G>Z9` I>bS :C@ :y=; :Ag= K†= Bw G>Z9`
Bu?;Kn?;[=Re;Y:Gc>KgST:h[R>L>;c=K]G9•=RGd9Gdl=R?j=kFASr:re?Y?
Bu?; Kn ?9=R?Vek‚>e;n:;9T? KgA ?Y? Gi@ ?;X= :c> :;p> Q>bS :;>q: Gre `
Bu?; Kn kFA Sr: Qdl? ?9=R ?VeQT? Gre KL> ?Y? Bu?; Kn I;Y? 9\ =;>^= =q9
I;s=R Iq: ;lehmBn=R KL> ?Y? Bu?; Kn=;r=:;i?KgA:Ag=K†=BwG>Z9:;•;>Z9W9F

kySr:h‘I;s=RQdl?QFSkFA@>Bu?;Kn=;r= :;i? Kg:Ag= K†= Bw G>Z9 G9s= Q>
IžS=;@9u?;Kn ?;[=Re;Y:Gc>?;–?J:;b?J=q9=;r=:;i?Qdl?Gi@?;X=>@A
:;P?=g\Qdl?hmBn=RI;>\^9?j9K]kySr:?o@Gd9Gdl=R<??j=:C9\]=
•
IPSEC 2012
$f4<WgC=d6<6?
Ac:QT=R?o@I;Y?;~=hAKL>;d=RnH:CA=R:^=RX>`QJ=R
RJ>:V:?F;A‹?ST:e;j=BwG>Z9R[?AI;F={=RkFASr:BwG>Z9=^=z9;dL=R
Qdl?hmBn=RCT=RC|>;~=;j=;<@B<C?o@R>@A:;P?=„S=R@\:CdL?
;<@B<C?JR>Y:Cu%:CA=R:Cdp=ReCA:A?AG?o@=J•=;h@9B> =:FW9Y:C•=;zmGH
QJ=RRJ>
•=; Xử lý đóng gói ESP


IPSEC 2012
 ;>:>q:V9:Cv?RJ>:
•’0k>: 4’%k>: *’k>: ’k>:
<?9C>:\e@C@S<:<Ch>=B<z8D
<W9<=?<=9Sk<C
@\GA@BB@:@8K@C>@kG<D
@BB>=R8•’%%k\:<hD
@B+<=R:; <z:<@B<C
9:;<=:>?@:>A=@:@8K@C>@kG<D
Hình:R>@A:;P?
Ý nghĩa của các phần:

@9 Qt\ h‘ Qu=; =R;‰@ ?Y? :Cdp=R :CA=R  +d9 H ?Y? :Cdp=R =g\ ?J :;b Gg :a\
?;X= ;@\ k_: k9T? >Z? Gi@ ?;X= ST: :Cdp=R :a\ ?;X= Qdl? Qu=; =R;‰@ :CA=R W9Y
:C•=;:;>q:GreIq:;le@==>=;;dKt\`I;9s=Bc=RQ[>KL>=gAQJGg?[Qu=;
:CA=RI;AF=R:;p>R>@=:•=:c>?o@QJU=?Y?:Cdp=Rk_:k9T?G9s=?JS‹::CA=R:V:
?F?Y?

hUC9iMj?<9k?=R>@??6?9X+gST:h[kV:Iˆk>:`?a=RKL>Qu@
?;–Qy?;KgR>@A:;P?@==>=;?;Ae;Še=;r=Bc=RB9\=;V:?;ARJ>BwG>Z9
=g\Y?R>Y:Cu:€•%%Qdl?Bg=;C>^=RQbhmBn=R:CA=R:d~=RG@>:;dp=R
Qdl??;X=Gm@k‚>e;y@:;9I;>:;>q:GreGg:Cdp=Rk_:k9T?
hBL4B?CB48lBWUR><9m<cXd~=R:i=;d:Cdp=Rh[:;P:i?o@
h@:^V@M,@<@U<W`n?=MA^6Z4<o6<6?Xt\Gg:Cdp=Rk_:k9T?Jk@A

R•SST:h[Gdl=Rk>q=Q}>?Y?k\:<BwG>Z9R[?;A‹?ST:e;j=BwG>Z9\^9?j9kFASr:

IPSEC 2012
Q|Qdl?Ss:F:CA=R:Cdp=R<z:<@B<CCdp=R=g\Qdl?S|;J@?a=RKL>:;9r::AY=
S|;J@Q|?;X=Gi@:CA=Rh9[:W9Y:C•=;:;>q:Greq9:;9r::AY=\^9?j9?Y?K<?:~
I;‚>:cA:;•=J?x=RQdl?k@AR•S‚Qt\;9r::AY=Qdl?Ba=RQbS|;J@:;dp=R
Gg:;9r::AY=’-s>I;>?Y?:;9r::AY=I;Y??x=RQdl?;…:Cl=;d;@\
!ƒ:CA=R:Cdp=R;le=;g?9=R?VeBu?;Kn-!
h@MM6?=Upqr''l:<BRXJ=;>]9=R9\^==;t=B•=Qq=hi?JS‹:
?o@:Cdp=R=g\
’q9 :;9r::AY=Sr:S| Qdl? hmBn=R \^9?j9kF= C•8eG@>=:<z:D e;F>
Gg

=R9\^= Gj=I;[> ?Y? k\:<8KyBn :Cdp=R ;leS|I;[>D :;• @BB>=RQdl? hm
Bn=R Qb Q>]=Qj\ KgA eG@>=:<z: 8k@A R•S @\GA@B @:@` @B +<=R:;` <z:
<@B<CKg@BB>=RD?JIy?;:;dL?:;<A\^9?j9
’ @BB>=R?x=R?j=:;>q:QbQFSkFAe;j=BwG>Z9Sr:S|8?>e;<C:<z:Dh‘
Iq::;v?‚k>^=R>L>k\:<Qbe;t=k>q:C•Cg=RKL>:Cdp=R9:;<=:>?@:>A=@:@
RAg> C@` @BB>=R ?U= ?J :;b hm Bn=R Qb ?;< BV9 QT Bg> :;i? ?o@ @\GA@B`
:9\=;>^=Sn?Qy?;=g\?j=e;F>Qdl??t==;_?K•=JF=;;d‚=R:L>k{=R:j=
:C9\]=B•=
h4<9B?<6@C<6V?M@<@Uls6R>CP@"l6<RX;s=R:>=zY?:;i?Qdl?:•=;
:C^=:Ag=kTRJ>=RAc>:C€e;j=@9:;<=:>@?:>A=B@:@
$"[4G<W\?9]S^_
$"(/N<WaCP@9B@MBW

?J;@>I>b9;Ac:QT=R`QJGgI>b9C@=heAC:KgI>b99==<G
#>b9C@=heAC:?;Ae;ŠekFAKZ?Y?R>@A:;P?GLe:C^=`=;d=RI;s=RkFAKZ
;<@B<CCA=RI>b9=g\`Qdl??;ž=KgAh@9ST:;<@B<CKg:CdL?ST:R>@A:;P?
GLe:C^=8?;¢=R;c=`;@\!fDKg:CdL?<?;<@B<CQ|Qdl??;ž=KgA
[>KL>K`;<@B<CQ‹:h@9;<@B<CKg:CdL?R>@A:;P?GLe:C^=8KyBn‚Qt\Gg
D:C@>G<C k@AR•S?Y?:Cdp=R@BB>=;`@BG<=R:;`Kg<z:<@B<C[>KL>
K*`Qdl? z<S=;de;j=:F>Qj9?9[>’:L>’Qj9?9[>`=^=h‘z9V:;>Z= h@9e;j=
;<@B<CS‚CT=R;Ae’:A’;Ae`CA9:>=RKgŒC@RS<=:@:>A=Y?Gi@?;X=Qy?;8B<h:Ae:>A=h
<z:<=:>A=;<@B<ChD?J:;b:CdL?;A‹?h@9;<@B<C9\=;>^=`BA?;–kFAKZ?Y?
:Cdp=Re;y@h@9;<@B<C`=^=?Y?Gi@?;X=Qy?;:;dp=RQdl?Q‹:h@9;<@B<C

IPSEC 2012

Hình:
#;9s=Bc=RK:CdL?Kgh@9I;>zmGH‚I>b9C@=heAC:
Hình:#;9s=Bc=RK*:CdL?Kgh@9I;>zmGH‚I>b9C@=heAC:
CA=RI>b99==<G`>==<C ;<@B<C S@=R Qu@?;–=R9•=KgQy?;?9[>?a=R`?U=A9:<C
;<@B<CSc=RQu@?;–QbQu=;:9\q=W9@=:<C=<:CA=RI>b9=g\`h‘kFAKZ:Ag=
kTRJ>:>=k^=:CA=R`k@AR•S?F>==<C;<@B<CAKL>A9:<C;<@B<C:;•Ku:Cy?o@
R>[=R=;dI>b9C@heAC:

IPSEC 2012
Hình:#;9s=Bc=RRJ>:>=Q|zmGH‚I>b99==<G
$"GC<94b<<VG?
J?Y?:;9r::AY=h@9Qdl?hmBn=RKL>

’`>=-
’!‡>:;!%
’!‡>:;’
’++9:;<=:>?@:>A=@GRAC>:;S
’++=?C\e:>A=@GRAC>:;S
Y?:;9r::AY=I;Y??J:;bQdl?;…:Cl+d9HGgy:=;V:ST::CA=R;@>Bu?;KnkFASr:
;A‹? =;r= :;i? e;F> Qdl? :;i? ;>Z=` =^= ;@> :;9r: :AY= zY? :;i? Kg Sr: S| I;s=R
Q•=R:;p>k„=R++
Y?:;9r::AY=Sr:S|;9r::AY=Sr:S|Qdl?zY?Qu=;k‚>GgSK>Z?KL>
?Y?:;9r::AY=Sr:S|Q[>zP=R•?Y?RJ>?J:;bQq=I;s=RQv=R:;P:i`=^=S…>RJ>
e;F>S@=R:;s=R:>=?j=:;>q:Qbe;y@:;9?J:;b:;>q:GreQ•=RkTSr:S|
8?C\e:ARC@e;>? h\=?;CA=>£@:>A=D Qb R>F> S| w G>Z9 =g\ ?J :;b Qdl??;– Qu=; :CA=R

:Cdp=R @\GA@B 8?;¢=R ;c= BdL> Bc=R ?Y? K<?:~ I;‚> :cA ’ =>:>@G>£@:>A= <?:ACD`
;A‹?:;9Qdl?:€;<@B<C?o@RJ>L>hi?JS‹:?o@:Cdp=R@BB>=R`?Y?:;9r::AY=Sr:
S|hmBn=RKL>?J:;b?J?Y?Q‹?:y=;I;[>8kGA?ID;A‹?G9•=R8h:C<@SD•Bu?;
KnkFASr:Gg:a\?;X==^=:;9r::AY=Sr:S|?J:;bGg++
Y?:;9r::A|=zY?:;i?;9r::AY=zY?:;i?hmBn=RQb:y=;Qdl?zY?Qu=;k‚>
%