IPsec security services
IPsec provides the following security services for data packets in the IP layer:
Confidentiality—The sender encrypts packets before transmitting them over the Internet, protecting the packets from being eavesdropped en route.
Data integrity—The receiver verifies the packets received from the sender to make sure they are not tampered with during transmission.
Data origin authentication—The receiver verifies the authenticity of the sender.
Anti-replay—The receiver examines packets and drops outdated and duplicate packets.