Understanding AH vs ESP and ISKAKMP vs IPSec in VPN tunnels

[@K2dawilla]

9 years later and still this is gold. The underlying principles never change that fast. It is the decor on top! Thanks so much Ryan.

[@brandonunger1689]

Amazing refreshing of IPSec IKEv1 and Phase 1, Phase 2, and breakdowns of what is going on. Truly a masterful teaching lesson. Thank you.

[@zhangstones]

This is the most clearly clips i've ever seen to introduce IPSec, plain to text. Thank you.

[@RyanLindfield]

+张磊 Thank for your kind words, I hope it helps.

[@ankitwadhwa89]

When you say " How you guys doing so far" . It really feels like we are in class. Keep up good work.

[@andaluspc]

He was already in a class by the way :)

[@darylallen2485]

I have literally been coming back to this video every 6 months for about 2-3 years. Every time i watch it again, I feel I have learned something I didn't pick up on the previous viewings. I found myself yelling "ip" at the screen for 13:34. Its never been more clear to me.

[@RyanLindfield]

I think learning happens in layers, as the concepts go by we only capture so much of it. Glad that you've found it useful. Glad to hear I'm not the only one talking to the computer screen and an empty room :)

[@rutwijkulkarni443]

Explanation is extremely in a simple jargon, sometimes the books don't help you but at the same time we have people like you. You nailed it . Thanks

[@stevanwpierce]

This is by far the best tutorial I've seen to date on explaining AH v. EDP and ISAKMP in IPSec tunnels. Your whiteboard examples leave nothing to question or wonder about. Combine this with a Cisco LAN to LAN VPN config guide for ASA or router and you have a winning combination. Thanks!

[@scott2495]

This guy is so clear and understandable when it comes to explaining/teaching. His knowledge is so impressive

[@swajalsarkar6122]

This video cleared my basic concept of IPSec, as I was previously thinking IPSec is a tunnel inside a tunnel of ISAKMP/IKE.

[@RyanLindfield]

Awesome, I'm glad that helped :) You may already be familiar, but there are some neat reasons to put a tunnel in a tunnel. GRE inside of IPSec for example. It let's you take traffic that IPSec doesn't support (anything other than unicast IP) and do what you like with it. Protocols that would normally not leave a broadcast domain (ARP, LLMNR, STP, CDP, IGP's etc) can be collected and passed anywhere then dropped off anywhere you like, any number of hops, networks, devices, and they come off the other side like nothing happened.

[@swajalsarkar6122]

@@RyanLindfield Thank you 🙂

[@ClovisdeCruz]

It takes a lifetime to understand IPSec... this helps.

[@anthonymoscon18]

Probably the best overall demonstrator out there, you offer a very visual approach that is made easy to comprehend.

[@venkcut]

8 years and still this the best explanation ever for ISAKMP/IPsec

[@user-vv9fw7ok9d]

I wish every professor could explain this stuff like you do.

[@katakberjarisepuluh5949]

after study ipsec for a couple hour, and now I understand in a minutes. Thanks man.

[@christophergriffin4330]

OMG. Ryan has updated my resume with a new skill in less than 20 minutes. What took me so long to find this video. Top Notch lesson! Thank you.

[@mikespilligan7840]

Absolutely superb thank you loads a true expert makes the difficult, easy (relatively) to understand.

[@RyanLindfield]

Thanks Mike, I'm glad it was useful!

[@alexandermarohnic7563]

Just found this after trying to understand it by reading multiple online sources and the SVPN official cert guide material. Thanks, Ryan. Your videos are awesome.

[@vishwaskaupvijayananda3900]

The best explanation of AH, ESP, IPSec, ISAKMP and how VPN works.

[@kubic22562]

Whoa, that was what I was looking for! No bullshiting about VPN providers but rather providing actuall knowledge :D

[@noone019]

You explained this 50x clearer and better than my uni professor ever could. Thanks so much, keep up the great work!

[@RyanLindfield]

Awesome to hear, I 'm glad that it was helpful :)

[@faaez27]

This is the best explanation to IPsec tunnels I have seen so far. It covers all the key points to give an idea on how IPsec works. Thank you.

[@aminabensalem5202]

Words don't do this extraordinary work justice! I knew I found the right video when he explained AH vs ESP at 4:18 . Thank you for this.

[@RyanLindfield]

Really happy it was useful, enjoy the journey :)

[@daniel.m2808]

The best explanation detail oriented. Thank you

[@Julio2Tube]

Great video. One thing to mention is that both ESP and AH have protocol numbers. 50 and 51, respectively.

[@joelvictores3540]

Excellent video. The best explanation I have ever seen for this topic. Technical and at the same time simple. Kuddos!!

[@RyanLindfield]

Glad it was helpful!

[@hurricaneharveyh7848]

@@RyanLindfield what are the biggest things that have happened over the past 6 years in this space?

[@hottroddinn]

Comprehensive information in 18:29 minutes told in a simple manner. Thanks for the great video!

[@diyegr]

This is the clearest, most concise explanation of VPN tunnel establishment I've ever seen. Thank you!

[@christoal6125]

Best video I've seen on site to site VPN. So easy to understand. Please keep up good work m8

[@rickysandhu3916]

I have to say this video is what finally nailed it for me! I've been trying to dive deep into the inner workings of IPSec for weeks and more I studied more I got confused. But this video finally cleared it all up! Thank You @RyanLindfield!

[@RyanLindfield]

I think part of the learning process is hearing it explained multiple times by different people, then finally p00f you own it :) Happy that helped! IPSec should serve you well for many years to come!

[@darion2272]

Same as many, this is the clearest explanation I've seen on this topic. Excellent work

[@biteme949]

Excellent intro! Very helpful for an Application Solution Architect who is working with his Infrastructure colleagues to allow remote access via IPSec VPN tunnels to understand what this is all about :-)

[@RyanLindfield]

Glad it was helpful!

[@maheshmuttath534]

Woawww. Crystal Clear about the topic ... What a presentation!!! . We feel as if we are in the class . Subscribed for all Videos .

[@mihirpatel197]

Thank you so much for your video, this helped me clear up most of my IPSEC VPN concept....

[@RyanLindfield]

Hi Mihir, I'm happy that you found my tutorial!

[@ankitkhandelwal9273]

very well explained the most sorted explanation . thumbs Up Ryann ,, hats off to u .

[@jonmcfarland3832]

great explanation, easy to understand since you explain it well.

[@RyanLindfield]

Delighted to hear you found it helpful, thanks a lot for letting me know!

[@nonsochinonso864]

One of the best clips on youtube on how VPN tunnels work.

[@Vrikancs]

Dude, you're awesome! I tried to study IPsec several times and never managed to understand it so far but this vid just opened my eyes so I wanted to say: Thank you! Great work :)

[@RyanLindfield]

Thanks Viktor, happy it helped!

[@pqr2726]

If I can begin to understand IPsec, IKE SAs, etc after this video then anyone can. I'd give him an Oscar if I could.

[@NetworkBook6]

This is the best ipsec tutorial which i have seen in my lifetime .. wonderful work .. cheers !

[@RyanLindfield]

Really kind of you to say, thanks Azhar!

[@g_pazzini]

A very good explanation on how the ipsec vpn connection established... Phase by phase.. Thanks a lot!

[@marcinwee5278]

I truly regret Ryan stopped adding videos , one of the best networking lecturer , this lesson here , best explanation of differences between ESP and AH , take care Ryan

[@RyanLindfield]

Thanks so much for your kind words, I'm glad you found the video helpful, it's a tricky thing to explain with words alone.. I promise to release more content in 2023 :).

[@muneer84]

Tx for this ...Studying for my CISSP ...This clarifies my doubts

[@RyanLindfield]

Great certification to go after, enjoy the journey :)

[@pakutharivalar]

Ryan, this video is the best one out there in youtube explaining site-to-site VPN's IPSec phases. Feel free to do DMPVN phases as well. Thanks a lot Ryan Lindfield

[@dineshkumar-qv4df]

Awesome content thanks Ryan for your wonderful video.

[@TheAnkurj]

Yes, this is easily the best explanation of IPSec so far.

[@Alexis-mj9xz]

I couldn't agree more

[@ml20101993]

Smooth, clear and concise ! Thanks for the video Ryan

[@sa3657]

Really a very usefull to understand the basic IPSEC parameter ...excellent explained

[@marrywhowanna]

By far the best IPSec explanation. Thanks!

[@al-kurdiahmed8081]

Ryan i would like to thank you for this awesome explanation. its a crystal clear . the only part missing is the practical side. thanks again

[@Telancer]

I would agree with the comments below great refresher for myself and great explanation. Thanks

[@brianh2447]

I'm fairly new to networking and I've been struggling with learning the concepts between IPSec for a bit. You just cleared everything up! thanks

[@newkool100]

Thanks a lot, one of the best videos for IPSec. Short and to the point.

[@darkcatapulter]

This was such an amazing explanation! I thought I understood Phase1 but not Phase2, but it seems like I actually had understood it wrong all together. Seeing the two different uses and purposes of the ISAKMP SA contrary to the IPsec SA (or Crypto SA) has cleared my mind.

[@trustprise]

First Phase1 is Policy Set exchange, Phase2 is How will be used Security Transfer data between them.

[@jakebenstade]

one of the great way to explain the things, love the way he explain the concept.

[@asahelsanchez3928]

So far the best explanation i have ever seeing!!! Great

[@RyanLindfield]

Asahel Sanchez Very kind of you thanks!

[@CiscoFernandez]

This is an excellent quality tutorial. Your teaching style is very effective. Thanks for posting this.

[@charleszuo2946]

This is the best video I've watched that goes into detail regarding the IPsec process, and I've used other resources like INE Udemy, and CIsco library. Thank you

[@aminegh8725]

Best teacher giving the why of concepts , thank you very much.

[@RyanLindfield]

You're too generous, thanks for the kind words!

[@daviddunn5877]

Very helpful. Most interesting 20 mins I've had today. Thanks for doing this video.

[@eddieotero77]

Thanks for this Ryan. Really helping me along with my CCNA Security studies. You're an awesome instructor.

[@piotrjasinski]

I'm preparing for 300-101. I was looking for a quick repeat of ipsec. Well explained. Thanks.

[@RyanLindfield]

Happy to help :)

[@hdhillon774]

amazing, thanks for explaining this topic in most simplistic way possible......

[@alozborne]

Thanks for such a clear and concise explanation! Going to be watching more of your videos soon, as you clearly are a subject matter expert.

[@MissLOHMORE]

this is very helpful, thank you! Clearly defines difference between ESP and AH for me!

[@wowsankar]

Thank you Ryan!! An awesome video and its very crisp to the point on IPSec.

[@JonathanAnon]

You are a really good teacher. Well done.

[@KishoreDasLearner]

Liked the video... very compact with all required information. Thanks for sharing.

[@contactsahan]

Wow..... Awesome..... You helped me brush up my VPN knowledge in 19Mins......!!!!!

[@RyanLindfield]

sahan marapana Glad it helped thanks for watching :)

[@rbora7671]

seen a very good explanation in a long time.

[@abdeljaouadouahid4235]

this is a very cool video that explains clearly IPSec, Thank you

[@RyanLindfield]

Glad it was helpful!

[@max200970]

Its was an awesome explanation ... cleared several doubts .Thank You

[@caleb_gonsalves]

I keep coming back for this video, better explanation on the Internet!

[@SnehalChorge]

Finally, I found the best IPsec VPN video! Very helpful! Thank you.

[@RyanLindfield]

Great to hear!

[@cwlancaster979]

Thanks for this explanation! Very helpful video and commentary! :)

[@gajendrabora130]

Ryan Lindfield, you are a rock star. Great tutorial

[@ahmetgazi3896]

Best IPSEC tutorial I have seen.

[@Daniel_CLopes]

My God! Never thought I would see such a great explanation of IPSec!

[@RyanLindfield]

Really kind of you thanks Daniel, glad to hear it was useful :)

[@twdk01]

Brilliantly explained; keep up the good work!

[@joe1z392]

really good video. clear my confusions my understanding about IKE1 and 2. Thank you!

[@xdx8457]

Thank you so much for this great IPSec video!

[@kishor.rautela]

Thanks Ryan, the video is so understandable. I am looking for the answer of one question, during this process when it use UDP 500 and when it is use UDP 4500 ? . I mean the difference between 500 and 4500 in prospective of tunnel formation. Once again thanks.

[@RyanLindfield]

You'll use UDP 500 always because that's how you agree upon how to do crypto (build your IPSec SA's ). Once IPSec SA's are built ESP is used at layer 4. If your VPN is across a firewall that uses PAT, ESP has no port numbers. So, unless your firewall can PAT ESP (Cisco firewall will if you ask it nicely) you'll drop those messages. It can be frustrating because the VPN client says connected but you'll see packets sent but non received. To get them to pass through the firewall you can "wrap" them in UDP and pass that over 4500, this is known as NAT-Traversal (NAT-T)

[@kishor.rautela]

@@RyanLindfield You are awesome.....thankyou so much.

[@smemadulhaq]

Brilliant explanation mate. Thank you for that.

[@azatkhan4714]

Thanks for your time.

[@RyanLindfield]

Thanks for watching!

[@sudiptakp]

Excellent!! very nicely put through.

[@romesan2011]

Very lucid and precise -Thank You

[@lalitb6791]

Awesome Man, you explained really well.

[@bikerbob182]

Great video. Seriously, thanks.

[@TheSmallRabbit]

I had a problem pinging site to site this week over an IPSEC that was up but not passing my traffic. I learned through testing that the IPSEC Phase 2 did not identify the networks I was trying to ping. Hence my traffic was not allowed to use the IPSEC tunnel even though the route in the routing table showed the destination via the IPSEC. So once I added the source + destination and crypto into my Phase 2 configs for these networks i wanted to reach bingo it all started working. BTW this was between a Meraki - Fortigate device using IKEv2 Hope this helps :-)

[@gabirican4813]

Great presentation, thank you.

[@RyanLindfield]

Thanks Gabi, glad to see you've got the enthusiasm to spend your Saturday learning the guts of crypto! Enjoy the journey :)

[@gabirican4813]

@@RyanLindfield Thank you, and I wish you all the best as well! 😊

[@kris___5655]

Awesome man..short & Simple

[@aseemsoodim]

Awesome Video Sir! You Explained Very Well! Helped me a lot!

[@Jay-jr1fx]

Very well explained! I just new IPsec now. haha

[@chriscowboyfan]

Very informative!!!! Great job in break down

[@MrGombzi]

Supperb ...This helped alot ..Well done !!

[@wouternet94]

This is was an excellent explanation! Thank you :)

[@kreep182]

this video is absolutely perfect for what I am trying to study right now. could you please do a similar video about ipsec in transport mode, and how routing works after the client establishes thw ipsec tunnel with the server? I cannot seem to find this anywhere. Thank you

[@SS-ty5pr]

Bro, you are awesome thanks for this awesome video

[@ashutoshchauhan1824]

Wow. I had been seeking for this kind of instructor for almost 9 years for Security related stuffs. I had a good instructor for the network but for security i never had one.

[@Vignesh_786]

Thanks for your effort and sharing this information🙇‍♂

[@Dihtung]

WOW, thanks for clearing this out.