[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: AH (without ESP) on a secure gateway
Mike,
You mention early in your message the key issue, which is the focus
of this debate. I maintained that it makes sense to use AH between a pair
of firewalls ONLY if the header is applied to a tunneled SA. Once we agree
on that, the rest ought to be easy. The disagreement has been on whether
it is appropriate to have two (or more) instances of AH without an
intervening IP header. We have seen several messages now arguing why this
is not an appropriate header sequence, including your message to which I am
responding. So, I don't disagree with the examples you cited.
Steve
Follow-Ups:
References: