At which layer does IPsec primarily operate?

At which layer does IPsec primarily operate?

• A. Application layer
• B. Transport layer
• C. Network layer (IP layer)
• D. Presentation layer

Answer: (C)

IPsec operates at the network layer. It protects IP packets as they move across networks by applying security services (confidentiality with ESP, integrity and authentication with AH, and anti-replay). It sits between the IP header and the transport-layer payload, which is why it’s used to build VPNs and secure traffic between hosts or networks. This approach is distinct from application-layer security (like TLS/SSL) or transport-layer security, which work at higher layers. In IPsec, you can use transport mode (protecting the payload of upper-layer protocols) or tunnel mode (encapsulating the entire IP packet), but the security processing remains at the IP (network) layer.

IPsec operates at the network layer. It protects IP packets as they move across networks by applying security services (confidentiality with ESP, integrity and authentication with AH, and anti-replay). It sits between the IP header and the transport-layer payload, which is why it’s used to build VPNs and secure traffic between hosts or networks. This approach is distinct from application-layer security (like TLS/SSL) or transport-layer security, which work at higher layers. In IPsec, you can use transport mode (protecting the payload of upper-layer protocols) or tunnel mode (encapsulating the entire IP packet), but the security processing remains at the IP (network) layer.