0

from the book : Network Security, Firewalls, and VPNs, 3rd Edition enter image description here

IPSec works at Layer 3 of the OSI model, while SSH functions at Layers 4 and 5.

as far as i know SSH is in layer 7 ( SSH is not in layer 4 and SSH is not in layer 5 )

am i correct and the paragraph in the book is wrong ?

6
  • 2
    SSH is at the same layer as TLS, thus the question is similar to: What layer is TLS?. To site the main point: "the OSI model does not work with SSL/TLS. TLS is not in any layer.". - If you believe it’s different, please edit the question, make it clear how it’s different and/or how the answers on that question are not helpful for your problem. Commented Aug 7 at 20:32
  • @Steffen Ullrich 1st : my question is : is the paragraph in the book wrong ? 2nd : you said : " SSH is at the same layer as TLS ". how ? tls is between layer 7 and layer 4 and ssh is in layer 7 . am i correct ? Commented Aug 7 at 20:41
  • 2
    To cite again the main part from the answer: "the OSI model does not work with SSL/TLS. TLS is not in any layer.". In other words: the right answer is not a different layer but that it does not make sense to use the OSI model here. In general the OSI model is not suitable for many modern protocols, use the TCP/IP model instead where OSI layer 5..7 are just combined into one layer. But I agree that it does not make sense to treat SSH as layer 4, except for considering port forwarding. Commented Aug 7 at 20:46
  • @Steffen Ullrich i know that the OSI model does not work with SSL/TLS. and that is why i said in my last comment " tls is between layer 7 and layer 4 " ( not a specific layer ) but my question : is ssh in layer 7 ? and if so then why you said " SSH is at the same layer as TLS " ( i mean that the layer of tls is no determined but the layer of ssh is determined ) Commented Aug 7 at 20:53
  • 1
    @Mario I don't think that LinkedIn post is from an authoritative source ... Let's not rely on that too much. Commented Aug 8 at 8:30

1 Answer 1

1

SSH consists of three different protocols (see RFC 4251):

  • The Transport Layer Protocol,
  • The User Authentication Protocol,
  • The Connection Protocol.

If you want to use the OSI model, then the different protocols operate at different layers, somewhere between layer 4 and layer 7.

So the quote you've asked about isn't wrong, just a bit imprecise.

1

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.