IKEv2 IPsec Virtual Private Networks: Understanding and Deploying IKEv2, IPsec VPNs, and FlexVPN in Cisco IOS (Networking Technology: Security)

If you need to really understand IKEv2 and FlexVPN, this is the book that will get you there. Be warned, it's not for the faint of heart - the authors spend a considerable amount of time deconstructing packet headers, key material generation, and exchanges - but if your goal is to become very familiar with the standards and implementation of FlexVPN and what is possible with IKEv2, you'll want to spend some time with this book and the relevant Cisco Live sessions. Highly recommended for anyone on the CCIE Security track or anyone who needs to deploy Flex in production.

This book is a fantastic resource for anyone responsible for deploying VPNs (client-based or site-to-site) using IKEv2. It provides a through and detailed explanation of how the protocol works, which is tremendously helpful especially when it comes to troubleshooting. Although the book mainly covers Cisco implementation, I've found much of the content is still applicable when using routers/firewalls/VPNs from other vendors as well. Very well written and highly recommended.

Very in depth and detail explanations. It has greatly enhanced my understanding of IKEv2, IPSec, and Cisco's implementations.

Excellent book

This book is a definitive guide on modern IPsec VPN theory and practice. It may not cover all the business-case justification for why you should care about encrypting your traffic, but you probably already know that IKEv2 is a best practice before you looked at this book for the first time.This book goes over the theory and also the practical applications on IKEv2. It is extremely thorough, but at over 650 pages, you could quickly ascertain that it is comprehensive. It covers IPv4 and IPv6 and mixed-mode examples.It helps you understand the various crypto algorithms and ciphers chosen during an IKEv2 proposal negotiation and how to choose stronger Advanced Encryption Standard (AES) Galois/Counter Mode (GCM) modes, stronger Diffie–Hellman groups for Next Generation Encryption (NGE) and Quantum Computing (QC) resistant methods.Great coverage of FlexVPN. If you currently use DMVPN or GetVPN today, you might want to also consider FlexVPN for your next deployment as it has many benefits.Numerous great CLI examples and many good diagrams to illustrate the concepts.If you think you already know IPsec and IKE negotiations, you will be surprised to learn many new concepts by reading this book. For example, I had no idea that IKEv2 supported SGT within the CMD header.Many times I wish I had a book like this to help distill many complex IETF RFCs into “plain English” and provide practical and actionable security best practices.

This book is the most comprehensive book on IKEv2 for Cisco network engineers that you will find and is all about real-world scenarios. Even if you aren't a Cisco engineer, the first 60- pages or so cover the encryption protocols and the IKEv2 protocol in an easy to understand format (at least compared to the RFC) There's also a chapter on fragmentation which will blow your mind wide open. Into a million fragments.If you buy one IKEv2 book for your loved on this Christmas (other religious festivals are available), this should be it.

Very well Written book, This book touches on most important topic on building Dynamic VPN for enterprise networks. it would be good if they can provide a link in the book to a Youtube reference that can illustrate visuals in video that walks through different scenarios for connectivity.Awesome work indeed.Balaji Sundararajan, Principle Architect in SDWAN and Enterprise Networking.

The book is awesome! I appreciate authors' work on presenting deeply technical topics in extremely easy to understand manner.

I knew my way around IKEv1 and IPSec commands on Cisco equipment well enough to establish VPN tunnels when I needed them but I wouldn't say I was an expert. I had a job to upgrade our tunnels to IKEv2. I scrabbled around the web trying to understand IKEv2 and was kind of getting there but not quite...I bought the Kindle version of this on a bit of an impulse. I'm really glad I did, it's well worth the money. Not only can I establish secure IKEv2 tunnels, I also feel like I know the subject thoroughly now. Even in respect to non-Cisco equipment. The book is a great reference too.One small criticism. The author writes off applying IKEv2 profiles to interfaces using crypto maps because they are dated. The new way of doing it is using Virtual Tunnel Interfaces on Cisco IOS. Unfortunately, if you're terminating your VPN tunnels on a Cisco ASA firewall, you need to use crypto maps. It would have been better if the author had covered this too.Fortunately it us only a minor change to the crypto map if you're used to using them with IKEv1.I don't usually leave reviews but was motivated to in this instance. Good job, highly recommended.

The 'bible' as far as IKEv2 and FlexVPN goes. An absolute must for any professional working in the security or routing and switching space. Essential reading for CCIE Security candidates also.The book is both beginner friendly and deep in technical knowledge. Gives you the building blocks to implement, troubleshoot and configure advanced topologies at scale.

This book is the IKEv2 VPN equivalent of Jeff Doyle's Routing TCP/IP Vol 1 & 2 - a must read for any network security engineer wanting to design and build secure VPN's. One of the best technical books I've read.

Well written , concise and accurate.An absolute must for anyone designing, supporting or troubleshooting IKEv2 VPNs.You too can become a FLEX expert!

La información que contiene viene muy detallada. Es recomendable tanto para alguna certificación como de ayuda cuando se tiene dudas.