Internet Protocol Security IPsec is a protocol suite for securing Internet Protocol IP communications ... IP packets IP packet of a communication session. IPsec also includes protocols for establishing mutual ... cryptographic key s to be used during the session. IPsec is an end to end security scheme operating ... Shell SSH , operate in the Upper layer protocol upper layers of the TCP IP model. Hence, IPsec protects ... to use IPsec. The use of TLS SSL, on the other hand, must be designed into an application to protect the application protocols. IPsec is a successor of the ISO standard Network Layer Security Protocol ... Data Network System project of the National Security Agency NSA . IPsec is officially specified ... various components and extensions. It specifies the spelling of the protocol name to be IPsec . ref ... Protocol publisher Network Working Group of the IETF date December 2005 quote The spelling IPsec is preferred and used throughout this and all related IPsec standards. All other capitalizations of IPsec ... are deprecated. page 4 ref IPstack Security architecture The IPsec suite is an open standard . IPsec uses the following Protocol computing protocol s to perform various functions ref name ... IETF ref ref name rfc4308 cite rfc title Cryptographic Suites for IPsec publisher Internet Engineering ... for Storing IPsec Keying Material in DNS publisher Internet Engineering Task Force IETF year ... AH is a member of the IPsec protocol suite. AH guarantees connectionless Data integrity integrity ... for IPv4 . Encapsulating Security Payload Encapsulating Security Payload ESP is a member of the IPsec protocol suite. In IPsec it provides origin Information security Authenticity authenticity , integrity ... title Cryptography in theory and practice The case of encryption in IPsec booktitle Eurocrypt 2006 ... 08 13 format PDF ref ref cite conference title Attacking the IPsec Standards in Encryption only Configurations ... for an outgoing packet, IPsec uses the Security Parameter Index SPI , an index to the security association ... more details
Orphan date February 2009 Racoon is a tool for handling Internet Key Exchange IKE in IPsec for Linux , FreeBSD and NetBSD . It s part of the KAME project , and almost all of the implemented KAME project code has been merged to FreeBSD and NetBSD . IPsec Tools is a port of the KAME code to Linux . External links http netbsd.gw.com cgi bin man cgi?racoon NetBSD current NetBSD manual page for Racoon http www.kame.net KAME Project http ipsec tools.sourceforge.net IPsec Tools , a part of KAME s IPsec utilities to the Linux 2.6 IPsec implementation Category Cryptographic software Category Computer network security Category Key management Category Virtual private networks Unix stub security software stub ... more details
NAT T NAT traversal in the Internet Key Exchange IKE is a method of enabling IPsec protected IP datagrams to pass through network address translation NAT . An IP packet is modified while passing through a network address translator device in a manner that is incompatible with IPsec Internet Protocol Security IPsec . NAT T protects the original IPsec encoded packet by encapsulation networking encapsulating it with another layer of UDP and IP headers. The negotiation during the Internet key exchange IKE phase is defined in nowiki RFC 3947 nowiki ref cite web title RFC 3947 Negotiation of NAT Traversal in IKE url http tools.ietf.org html rfc3947 publisher Network Working Group of the IETF date January 2005 ref and the UDP encapsulation itself is defined in nowiki RFC 3948 nowiki ref cite web title RFC 3948 UDP Encapsulation of IPsec ESP Packets url http tools.ietf.org html rfc3948 publisher Network Working Group of the IETF date January 2005 ref . Most major networking vendors support NAT T for IKEv1 in their devices. In Microsoft Windows XP with Service Pack 2 the feature can be enabled ref cite web title MSKB818043 L2TP IPsec NAT T update for Windows XP and Windows 2000 url http support.microsoft.com kb 818043 en us publisher Microsoft Knowledgebase ref but is disabled when the VPN server itself is behind a network address translator because of security issues ref cite web title MSKB885348 IPSec NAT T is not recommended for Windows Server 2003 computers that are behind network address translators url http support.microsoft.com kb 885348 en us publisher Microsoft Knowledgebase ref . References cite web title RFC 3715 IPsec Network Address Translation NAT Compatibility Requirements url http tools.ietf.org html rfc3715 publisher Network Working Group of the IETF date March 2004 references Category Cryptographic protocols Category Internet protocols Category Tunneling protocols ar es NAT T fr NAT T ja NAT T ... more details
Unreferenced date May 2007 The cookie exchange in IPsec comes under the Oakley protocol , which is a protocol of key management. The cookie exchange requires that each side send a pseudorandom number, the cookie, in the initial message, which the other side acknowledges. This acknowledgement must be repeated in the first message of the Diffie Hellman key exchange . If the source address was forged, the opponent gets no answer. Thus, an opponent can only force a user to generate acknowledgements and not to perform the Diffie Hellman calculation. Note that cookies in the sense of IPsec are unrelated to HTTP cookies used by web browsers. The recommended method for creating the cookie is to perform a fast hash eg. MD5 over the Internet Protocol IP source and destination addresses, the UDP source and destination ports, and a locally generated secret value. Category Internet protocols Don t put this in category HTTP. This article talks about cookies in the sense of the IPsec protocol. That has nothing to do with HTTP cookies. ... more details
IKE may refer to The IKE Group , a research group at the Department of Business Studies, Aalborg University, Denmark Ikerasak Heliport LID airport code , a heliport in Ikerasak, Qaasuitsup, Greenland Internet Key Exchange , the protocol used to set up a security association SA in the IPsec protocol suite See also Ike disambiguation Disambig ... more details
The Security Parameter Index SPI is an identification tag added to the header while using IPsec for tunneling the IP traffic. This tag helps the kernel discern between two traffic streams where different encryption rules and algorithms may be in use. The SPI as per RFC 2401 is an essential part of an IPsec Security Association SA because it enables the receiving system to select the SA under which a received packet will be processed. An SPI has only local significance, since it is defined by the creator of the SA an SPI is generally viewed as an opaque bit string. However, the creator of an SA may interpret the bits in an SPI to facilitate local processing. This works like port numbers in TCP and UDP connections. What it means is that there could be different SAs used to provide security to one connection. An SA could therefore act as a set of rules. Carried in IPsec Encapsulating Security Payload Encapsulating Security Payload ESP header or IPsec Authentication Header Authentication Header AH , its length is 32 bits. Category Internet protocols Compu stub ... more details
scalability. DMVPN is considered by many engineers as superior to early dynamic ipsec technologies ... of An IPsec profile, which is associated to a virtual tunnel interface in IOS software. Traffic sent via the tunnel is encrypted per the policy configured IPsec transform set Generic Routing Encapsulation ... more details
The KAME project was a joint effort of six organizations in Japan which aimed to provide a free IPv6 and IPsec for both IPv4 and IPv6 protocol stack implementation for variants of the Berkeley Software Distribution BSD Unix computer operating system. The project began in 1998 and on November 7, 2005 it was announced that the project would be finished at the end of March 2006. ref http www.kame.net newsletter 20051107 ref The name KAME is a short version of Karigome , the location of the project s offices, and it also is a word for turtles. ref http playground.iijlab.net material kazu kame presen mgp00015.html ref The following organizations participated in the project ALAXALA Networks Corporation Fujitsu , Ltd. Hitachi, Ltd . Internet Initiative Japan Inc. Keio University NEC Corporation University of Tokyo Toshiba Corporation Yokogawa Electric Corporation FreeBSD , NetBSD and DragonFly BSD integrated IPSec and IPv6 code from the KAME project OpenBSD integrated just IPv6 code rather than both having developed their own IPSec stack . Linux also integrated code from the project in its native IPSec implementation. ref citation url http www.linuxjournal.com article 7840 title Benchmarks for Native IPsec in the 2.6 Kernel publisher Linux Journal last Roy first Vincent date 12 October 2004 ref The KAME project collaborated with the TAHI Project http www.tahi.org which develops and provides verification technology for IPv6 , the USAGI Project http www.linux ipv6.org and the WIDE Project http www.wide.ad.jp . External links http www.kame.net the KAME project official site http www.alaxala.com ALAXALA Networks Corporation http www.iij.ad.jp Internet Initiative Japan Inc. References Reflist Category Internet protocols Category BSD software Category Free software projects de KAME Projekt fr Projet KAME ja KAME ... more details
Unreferenced date October 2006 Simple Key Management for Internet Protocol or SKIP was a protocol developed circa 1995 by the IETF Security Working Group for the sharing of encryption key s. SKIP and Photuris protocol Photuris were evaluated as key exchange mechanisms for IPsec before the adoption of Internet Key Exchange IKE in 1998. ref cite article title Configuring IPsec IKE on Solaris last1 Dubrawsky first1 Ido date 2002 08 15 publisher SecurityFocus accessdate 2009 12 02 url http www.securityfocus.com infocus 1616 ref Skip is hybrid Key distribution protocol Simple Key Management for Internet Protocols SKIP is similar to SSL, except that it establishes a long term key once, and then requires no prior communication in order to establish or exchange keys on a session by session basis. Therefore, no connection setup overhead exists and new keys values are not continually generated. References reflist DEFAULTSORT Simple Key Management For Internet Protocol Category Key management Crypto stub ... more details
SADB may refer to Sadbh , the Sidhe mother of Oisin Sadb ingen Chuinn , an Irish queen A Security Association Database, used in IPsec disambig Short pages monitor This long comment was added to the page to prevent it being listed on Special Shortpages. It and the accompanying monitoring template were generated via Template Longcomment. Please do not remove the monitor template without removing the comment as well. ... more details
other uses of IAPM Integrity Aware Parallelizable Mode IAPM is a block cipher modes of operation mode of operation for cryptographic block cipher s. As its name implies, it allows for a parallel mode of operation for very high throughput. Encryption and authentication IAPM was the first cipher mode created to provide both authentication and privacy in a single pass. Citation needed date January 2011 Previously, two passes would be required to achieve both benefits for example the first pass using DES in CBC mode and the second pass authenticating with HMAC MD5. IAPM allows for a single pass achieving both authentication and privacy. OCB mode also provides authentication and privacy in a single pass, and has largely supplanted IAPM for single pass authenticated encryption. IAPM mode was designed by Charanjit Jutla . The OCB inventor, Phillip Rogaway , gives credit to Jutla for inventing the single pass technique. ref http www.cs.ucdavis.edu rogaway ocb ocb faq.htm jutla Rogaway s OCB FAQ crediting Jutla ref See also OCB mode Notes Reflist References http tools.ietf.org id draft jutla ietf ipsec esp iapm 00.txt C.S. Jutla A Parallelizable Authenticated Encryption Algorithm for IPsec http eprint.iacr.org 2000 039 Charanjit S. Jutla Encryption Modes with Almost Free Message Integrity, ACR Report 2000 39, 1 August 2000 External links http eprint.iacr.org 2000 039 Jutla s IAPM specification IACR 2000 39 http tools.ietf.org id draft jutla ietf ipsec esp iapm 00.txt Jutla s IAPM IPSec draft Crypto navbox block hash Category Block ciphers ... more details
Internet Key Exchange IKE or IKEv2 is the protocol used to set up a security association SA in the IPsec .... Architecture Most IPsec implementations consist of an IKE Daemon computer software daemon that runs in user space and an IPsec stack in the Kernel computer science kernel that processes the actual ... information, such as the IPsec endpoint addresses, keys and certificates, as required. Kernel ... SA on both sides. The negotiated key material is then given to the IPsec stack. For instance ... that are to be protected, as well as what type of IPsec tunnel has been created. The IPsec stack ... in Phase 1 to negotiate Security Associations on behalf of other services like IPsec . The negotiation ... mobility and multihoming for it and ESP. By use of this extension IKEv2 and IPsec can be used by mobile ... IKEv2 uses cryptographic mechanisms to protect its packets that are very similar to what IPsec Encapsulating Security Payload ESP uses to protect the IPsec packets. This led to simpler implementations ... include IKE session resumption the ability to resume a failed IKE IPsec session after a failure, without ... IKE requests, allowing for simple load balancing between multiple IKE endpoints RFC 5685 . IPsec ... improving IKE IPsec level protocol synchronization between a cluster of IPsec endpoints and a peer ... . Implementations IKE is supported as part of the IPsec implementation in Windows 2000 , Windows XP ... library cc784994 WS.10 .aspx Internet Key Exchange Internet Protocol Security IPsec Technet ref The ISAKMP ... infocus 1519 Using IPSec in Windows 2000 and XP, Part 1 ref Microsoft Windows 7 and Windows Server ... also known as Agile VPN . There are several open source implementations of IPsec with associated IKE ... , which can configure i.e., establish SAs to the KLIPS or NETKEY kernel based IPsec stacks. NETKEY is the Linux kernel Linux 2.6 kernel s native IPsec implementation. The Berkeley Software Distribution s also have an IPsec implementation and IKE daemon, and most importantly a cryptographic framework ... more details
Infobox software name Openswan logo screenshot caption author developer released latest release version 2.6.32 latest release date release date 2010 12 17 latest preview version 2.6.28dr3 latest preview date release date 2010 07 05 operating system Linux , FreeBSD platform language status genre IPsec license GNU General Public License website http www.openswan.org openswan.org Openswan is a complete IPsec implementation for Linux 2.0, 2.2, 2.4 and 2.6 kernels. Openswan began as a Fork software development fork of the now defunct FreeS WAN project, and continues to be released freely under the GNU General Public License . Unlike the FreeS WAN project, it is not developed exclusively for the Linux operating system. External links Portal box Free software Cryptography http www.openswan.org Openswan website http wiki.openswan.org Openswan wiki http www.daemon.be maarten openswanpix.html Setting up a VPN between OpenSWAN and a PIX firewall VPN Category Software forks Category Free security software Category Cryptographic protocols linux stub ja Openswan ... more details
Refimprove date August 2008 POV check date February 2009 MPLS VPN is a family of methods for harnessing the power of Multiprotocol Label Switching MPLS to create virtual private network s VPNs . MPLS is well suited to the task as it provides traffic isolation and differentiation without substantial overhead. Citation needed date July 2009 Layer 3 MPLS VPN A layer 3 MPLS VPN, also known as L3VPN, combines enhanced BGP signaling, MPLS traffic isolation and router support for VRFs VRF Virtual Routing Forwarding to create an IP based VPN. Compared to other types of VPN such as IPSec VPN or ATM, MPLS L3VPN is more cost efficient and can provide more services to customers. However, there is no implementation of privacy of the traffic sent over the MPLS, except to the degree that you trust the operator of the MPLS equipment along the way. If privacy is a concern, other encryption method such as end to end IPSec tunnels should be considered before injecting the traffic to MPLS backbone. Category MPLS networking ... more details
For the Microsoft Windows Cryptography API Cryptographic Application Programming Interface Crypto API is a cryptography framework software framework in the Linux kernel , for various parts of the kernel that deal with cryptography, such as IPsec and dm crypt . It was introduced in kernel version 2.4.12 and has since expanded to include essentially all popular block cipher s and hash function s. See also Portal box Cryptography Free software dm crypt Linux DEFAULTSORT Crypto Api Linux Categories Category Application programming interfaces Category Cryptographic software Category Linux security software Category Linux kernel features Crypto stub Linux stub ... more details
Advert date December 2007 Hifn is a semiconductor manufacturer founded in 1996 as a Corporate spin off spin off from Stac Electronics . The company is headquartered in Los Gatos , California , and has offices in North America, Europe and Asia. It is active in the market of security processors. Following the initial public offering in 1998, the company s stock was formerly traded on the NASDAQ under the symbol http quotes.nasdaq.com asp SummaryQuote.asp?symbol HIFN&selected HIFN HIFN Hifn holds the patents for the Lempel Ziv Stac LZS and Microsoft Point to Point Compression MPPC compression algorithm s. Hifn was the first company to offer a processor with integrated encryption and compression in 1998, and followed this in 1999 with the world s fastest security processor for VPN s. In 2000, Hifn invented an Intelligent Packet Processor a security co processor capable of not just performing raw algorithm processing, but of modifying the complete packet, allowing their processors to transform an Internet Protocol IP packet into an IPSec packet in a single pass in the security processor with only the Policy and IPSec Stack being required on the host CPU. They were the first to offer a security processor featuring the new Advanced Encryption Standard AES algorithm in 2001. In 2004 they followed on from their Packet Processor with a complete IPSec protocol processor an Inline processor capable of performing the entire IPSec and IKE processing with no CPU intervention required. They also adapted this processor for the Storage area network SAN market, for applications such as iSCSI . Hifn also offers security processors for Secure VoIP and WiMax applications, and its technology innovator, offering technologies for application aware flow classifiers and search engines. In earlier 2004, Hifn acquired part of IBM Network Processor assets in addition to PowerNP s intellectual property license. Since then Hifn became the sole vendor of PowerNP IBM code Rainier to a couple of tele ... more details
Orphan date February 2009 Dead Peer Detection DPD is a method of detecting a dead Internet Key Exchange IKE peer. The method uses IPsec traffic patterns to minimize the number of messages required to confirm the availability of a peer. DPD is used to reclaim the lost resources in case a peer is found dead and it is also used to perform IKE peer failover. References http www.ietf.org rfc rfc3706.txt RFC 3706 A Traffic Based Method of Detecting Dead Internet Key Exchange IKE Peers Category Cryptographic protocols crypto stub compu network stub ... more details
T is commonly used by IPsec virtual private network clients in order to have Encapsulating Security ... or special traversal techniques for NAT traversal. NAT traversal and IPsec technical section NAT traversal and IPsec date March 2011 In order for IPsec to work through a NAT, the following protocols ... Authentication Header AH IP protocol number 51 or, in case of NAT T IPsec NAT T UDP port 4500 Often this is accomplished on home routers by enabling IPsec Passthrough . In Windows XP, NAT T is enabled ... kb 885348 en us title IPSec NAT T is not recommended for Windows Server 2003 computers that are behind network address translators publisher Microsoft knowledge base 885348 ref . IPsec ... T and IPsec is to enable opportunistic encryption between systems. NAT T allows systems behind NATs ... with Tunnel mode IPsec for NAT Domains RFC 2993 Architectural Implications of NAT RFC 3022 Traditional ... RFC 3715 IPsec Network Address Translation NAT Compatibility RFC 3947 Negotiation of NAT Traversal ... more details
confidentiality or strong authentication by itself. IPsec is often used to secure L2TP packets by providing ... known as L2TP IPsec discussed below . The two endpoints of an L2TP tunnel are called the em ... and session in voluntary tunneling method are Image l2tp pkt exchg.PNG L2TP IPsec Because of the lack of confidentiality inherent in the L2TP protocol, it is often implemented along with IPsec . This is referred to as L2TP IPsec , and is standardized in IETF RFC 3193. The process of setting up an L2TP IPsec VPN is as follows Negotiation of IPsec security association SA , typically through em Internet ... keying methods exist. Establishment of IPsec Encapsulating Security Payload Encapsulating Security ... takes place over the SA s secure channel, within the IPsec encryption. L2TP uses UDP port 1701. When the process is complete, L2TP packets between the endpoints are encapsulated by IPsec . Since the L2TP packet itself is wrapped and hidden within the IPsec packet, no information about the internal ... after IPsec data has been decrypted and stripped, which only takes place at the endpoints. A potential point of confusion in L2TP IPsec is the use of the terms em tunnel em and em secure channel em . The term .... In L2TP IPsec , first IPsec provides a secure channel, then L2TP provides a tunnel. Windows ... L2TP without IPsec easier, both described in sections that follow below an Microsoft Management Console ... advfirewall and the IPsec client in WFwAS. One of the aforementioned difficulties is that it is not compatible ..., so if the IP address of the IPsec server changes, all clients will have to be informed of this new ... cable provider doesn t appear as doing the transport. See also IPsec Layer 2 Forwarding Protocol ... eng vpndetails Linux L2TP IPsec server , http mpd.sourceforge.net FreeBSD multi link PPP daemon ... windows2000serv support vpnclientag.mspx Microsoft L2TP IPsec VPN Client for Windows 98 Windows ... RFC 3193 Securing L2TP using IPsec RFC 3301 Layer Two Tunnelling Protocol L2TP ATM access ... more details
AuthIP is a Microsoft Proprietary protocol proprietary extension of the Internet key exchange IKE cryptographic protocol . AuthIP is supported in Windows Vista and later on the client and Windows Server 2008 and later on the server. AuthIP adds a second authentication to the standard IKE authentication which, according to Microsoft, increases security and deployability of IPsec VPN s. AuthIP adds support for user based authentication by using Kerberos v5 or SSL certificates. AuthIP is not compatible with IKEv2 , an IETF standard with similar characteristics however Windows 7 and Windows Server 2008 R2 also support IKEv2. See also Secure Socket Tunneling Protocol SSTP External links http technet.microsoft.com en us library bb878097.aspx AuthIP in Windows Vista The Cable Guy column at the Microsoft website http www.microsoft.com technet technetmag issues 2007 10 CableGuy default.aspx The Authenticated Internet Protocol The Cable Guy column at the Microsoft website Category Cryptographic protocols Category Windows Server ... more details
wiktionary kink A twist or bend in something such as rope , cable , hair or Inverse gamma distribution IG curve Kink or KINK can refer to Kink sexual , a colloquial term for non normative sexual behavior KinK , a Canadian documentary television series profiling some of the more unusual edges of human sexuality KINK FM 101.9 , a radio station in Portland, Oregon, in the United States Kink FM , a radio station in the Netherlands The Kinks , a British rock band A colloquial term for a trigger point Kinks are solutions to the Sine Gordon equation Sun kink , a buckling of railway tracks caused by high temperature. Kink.com , an internet pornography company focusing on BDSM and related Sexual Fetishism fetishes Kerberized Internet Negotiation of Keys , a Kerberos protocol Kerberos based protocol used in IPSec similar to Internet Key Exchange Tarmo Kink born 1985 , Estonian football player disambig de Kink sv Kink ... more details
multiple issues orphan February 2009 unreferenced December 2007 notability December 2007 Quantum Key Distribution Networks are future networks that are capable to provide Quantum key distribution QKD in passive optical networks. These networks will be integrated within the nowadays classical networks with the minor impact in the optical infrastructures. The target is to combine classical channels with quantum channels in order to use the quantum channels to deliver cryptographic keys and use them to encrypt data payload inside IPsec or in any other stack protocol. Nowadays there are projects to start deploying these quantum networks in GPON by research enterprises like Telefonica Telefonica I D and some others companies. category Network architecture Category Quantum cryptography telecomm stub ... more details
selfref For the Wikipedia editing policy, see Wikipedia AH . Letter NumberCombination AG AI BH AH also Ah or ah may refer to Adenomatous hyperplasia Ah computer virus AH register , the high byte of an X86 16 bit AX register A ha , a New Wave Synthpop band from Norway Ah digraph Extended hours trading After hours trading in stock trading AH 1 Cobra , a model of attack helicopter AH 64 Apache , a model of attack helicopter A.H. vs State of Florida Adolf Hitler Air handler , Often abbreviated to AHU, is a device used to condition and circulate air Albert Heijn , a Dutch supermarket chain owned by Ahold Alternate History , a subgenre of speculative fiction Anno Hegirae Hijri year in the Islamic calendar Ampere hour , a unit of electric charge. Anhui , cf. CPG website Arcana Heart . a video series Artificial Horizon , a cockpit instrument Aviation an attohenry , from the Henry unit , an SI unit of inductance Auction house Austria Hungary , a former European empire IPsec Authentication Header Authentication Header , a part of the IPsec protocol suite Available hours , used with service ticket dispatches Avalon Hill , makers of military themed board games disambig de AH es Ah eo AH fa AH fr AH ko AH id AH it AH sw AH lt AH nl AH ja AH no AH pl Ah pt AH ru AH sl AH fi Ah sv AH zh AH ... more details
Primary sources date April 2008 Infobox software name FreeS WAN logo screenshot caption author John Gilmore activist John Gilmore Founder developer None released latest release version 2.06 latest release date 22 April 2004 latest preview version latest preview date operating system Linux platform language status genre IPsec & Internet key exchange IKE license website http www.freeswan.org www.freeswan.org FreeS WAN , for Free S ecure W ide A rea N etworking, was a free software project, which implemented a reference version of the IPsec network security layer for Linux and other Unix like operating systems. The project goal of ubiquitous opportunistic encryption of Internet traffic was not realized, although it did contribute to general Internet encryption. The project was founded by John Gilmore activist John Gilmore , and administered for most of its duration by Hugh Daniel. Technical lead for the project was Henry Spencer . The final FreeS WAN version 2.06 was released on 22 April 2004. The earlier version 2.04 was Fork software development forked to form two projects, Openswan and strongSwan . External links Portal box Free software Cryptography http www.freeswan.org Project website http www.freeswan.org freeswan trees freeswan 2.06 doc Documentation Interlang DEFAULTSORT Frees Wan Categories Category Free security software Category History of software Network software stub es FreeS Wan ja FreeS WAN ... more details
The Nexus Hawk is a gateway router linking broadband cellular data, such as CDMA , GSM and 802.11 Wi Fi IEEE 802.11 802.11 802.11a a , 802.11 802.11b b , 802.11 802.11g g and Wide area network WAN such as BGAN Satellite networks providing enterprises with broadband wireless internet network data services in mobile and remote environments. ref http www.techproductnetwork.com TPN PRODUCT VIEW.ASPX?ID 100203 TPN View Product Bot generated title ref The Nexus Hawk s original development was funded under a DOD prime contract. The technology was primarily designed for military use and supports public safety. The Nexus Hawk is currently in use by law enforcement agencies, governmental data infrastructure, commercial fleet, connectivity in and to retail locations, and livery services in Washington DC. The device provides secure access to public and private wired and wireless networks including Sprint Nextel Sprint Nextel CDMA EVDO Rev A, 1xRTT , Verizon wireless Verizon Wireless CDMA EVDO Rev A 1xRTT , At&t wireless AT&T Wireless GSM HSDPA , Telus Telus CDMA EVDO Rev A 1xRTT , Washington DC EVDO Rev A Regional Wireless Broadband Network RWBN , non U.S. cellular networks, and secure WiFi. GPS for applications such as Automatic Vehicle Location AVL sometimes commercial referred to as fleet tracking or Geo Based Dispatch and Navigation. Connectivity to multiple simultaneous WAN paths with user selectable order for failover and fail back. Access to 4 simultaneous WANS and GPS . Automatic and persistent network connections. Incorporates a PCMCIA PC card CardBus CardBus slot to accommodate future networks such as WiMAX and Public Safety Band , accepts ExpressCard 34mm air cards, PCMCIA PC card CardBus CardBus air cards and USB air cards, Secure Remote Configuration Management, Built in Ipsec IPsec and Openvpn OpenVPN and pass through security features, FIPS 140 2 FIPS140 2 SSL Certified Module . See also HSPA Huawei E220 References reflist External links http www.nexushawk.com Ne ... more details