StudyToCert

All certifications / ENCOR / Lessons

Cisco CCNP Enterprise core exam (ENCOR) 350-401 v1.2 · Domain 2: Virtualization

IPsec: IKE phases, tunnel vs transport mode, crypto maps vs tunnel protection

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

IPsec (IP Security) is a framework of protocols that protects IP traffic with confidentiality (encryption), integrity (a hash-based message authentication code), authentication of the peers and anti-replay protection. It is used for site-to-site VPNs between routers and firewalls and for remote access. ENCOR focuses on how the tunnel is negotiated, how packets are encapsulated and the two main ways to configure it on Cisco IOS.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study ENCOR for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the ENCOR study plan