Home Price & Ordering Technical Support The Blunk Difference Contact Us

TargetIPsec™

Embedded IP Security Protocol

Features

Blunk Microsystems' embedded IP Security Protocol (IPsec) is included with TargetTCP-IPv6™ while TargetTCP-IPv4™ can be seamlessly extended with IPsec protocol support with TargetIPsec™, Blunk Microsystems' embedded IP Security Protocol. IPsec is an enterprise grade security subsytem for VPN's or devices such as those requiring USGv6 conformance. Security Policies (SP) and Security Associations (SA) can be configured to secure network traffic by destination(s) with fine grained precision. Port specific traffic can secured for UDP, TCP while ICMP can be secured by ICMP code. SP's and SA's can be configured at compile, boot or runtime with full API and integrated shell commands. All security is applied transparently of upper layer protocols, including customer and legacy network applications.

IPsec features include:

  • IPsec- Security Architecture for the Internet Protocol (RFC 4301)
    • includes shell interface for associations and policies
      • spshow - display Security Policies
      • sashow - display Security Associations
      • spsave - Save Security Policies to NVRAM
      • sasave - Save Security Associations to NVRAM
      • spadd ‹6|4› ‹src› ‹dst› ‹tp› ‹pr› ‹rp› ‹lp› ‹m› ‹ty› [spi] - Add Policy
      • saadd ‹6|4› ‹spi› ‹src› ‹dst› ‹AH|ESP› ‹algo1› ‹key1› ... - Add Association
      • spdelete ‹6|4› ‹src› ‹dst› ‹tp› ‹pr› ‹rp› ‹lp› - Remove Security Policy
      • sadelete ‹spi› - Remove Security Association

  • AH- Internet Protocol Authentication Header (RFC 4302)

    • Authentication algorithms NULL, MD5, MD5 96, SHA, SHA 96

  • ESP- Internet Protocol Encapsulating Security Payload (RFC 4303)
    • Authentication algorithms NULL, MD5, MD5 96, SHA, SHA 96
    • Encryption algorithms DES CBC, 3DES CBC, AES CBC, AES CTR

  • Tested interoperable with Windows, UNIX and other TCP/IP stacks
  • Developed using TargetOS™, Blunk Microsystems' real-time operating system, the source code is 100% ANSI C and is easily ported to both other real-time kernels and to polling environments that do not use a kernel. A pSOS port is provided for the Trimedia processor.

  • Integrated with TargetTools™, the IDE for embedded development from Blunk Microsystems with an integrated compiler and kernel-aware debugger, visual code editor, search and replace tool, BDM for board bring-up, and fast Ethernet download.

  • Royalty-free. Includes source code, sample applications, and one year of technical support.