The ability of keeping the ip packet ' s integrity , secrecy , authentication , data origination , anti - relay is discussed . the relationship of ipsec component authentication header ( ah ) , encapsulating security payload ( esp ) and ike ( internet key exchange ) is also talked about . this discussion of ipsec makes the impression that ipsec make ip layer security enough 论述了ipsec在ip报文的完整性、机密性、数据来源认证和抗重播等方面的能力, ipsec的基本协议? ?认证报文头( ah )和安全封装载荷报头( esp )与ipsec安全体系的其它组成部分如安全策略、加密和认证算法、密钥管理等如何合作,共同完成对ip报文的安全保护。