The data plane provides the infrastructure for sending data traffic among the vEdge routers in the Viptela overlay network. Data plane traffic travels within secure Internet Security (IPsec) connections. The Viptela data plane implements the key security components of authentication, encryption, and integrity in the following ways:
+ Authentication - As mentioned above, the Viptela control plane contributes the underlying infrastructure for data plane security. In addition, authentication is enforced by two other mechanisms:
++ RSA encryption with 2048-bit keys.
++ Two standard protocols from the IPsec security suite framework, Encapsulation Security Payload (ESP) and Authentication Header (AH), are used to authenticate the origin of data traffic.
Reference: https://sdwan-
docs.cisco.com/Product_Documentation/Software_Features/Release_18.4/Security/01Security_ Overview/Data_Plane_Security_Overview