[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: doi-07/interoperability questions
Yes. In fact, I was thinking specifically about gateway to gateway
configurations using both AH and ESP.
Robert Moskowitz writes:
> At 10:50 AM 3/10/98 -0500, Ben Rogers wrote:
>
> I believe you are talking about where the transforms all end at the same
> system not the case where the transport is end to end and the tunnel is
> gateway to gateway.
>
> >My other question centers on the use of Encapsulation Mode attributes in
> >combined (AND) proposal transforms. Namely, it seems obvious that we
> >should support the case where both are transport mode (Case 1.3 in
> >section 4.5 of arch-sec), and not support the case where both are tunnel
> >(probably returning a BAD-PROPSAL-SYNTAX). However, I'm not too clear
> >as to whether I should support mixed proposals. My opinion is that it
> >makes sense to support AH (transport) and ESP (tunnel) with the
> >following encapsulation:
> >
> >[IP2][AH][ESP][IP1][upper]
> >
> >and to not support AH (tunnel) and ESP (transport). Does anyone else
> >have any feelings on this matter? Whatever we choose probably ought to
> >be added as clarifying text to [IPDOI].
> >
> >
> >ben
> >
> >
> Robert Moskowitz
> ICSA
> Security Interest EMail: rgm-sec@htt-consult.com
Follow-Ups:
References: