[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: comments on VPN framework document
Stephen,
>I was comparing the IPSEC-tunnel (as defined in the IPSEC architecture) with
>other IP tunneling recommendations - all of which have much more too them
>than
>just encapsulating the original packet with an IP header.
>
>
>> >If you encrypt the original IP header,
>> >what alternative have you got but to
>> >add another one.
>>
>> The same comment could be made about an
>> L2TP packet, which is encrypted when contained
>> in IPSEC/L2TP.
>
>Again - I was making the point the adding an IP header is ALL the
>IPSEC tunnel is, nothing more.
Not quite true. There are processing rules for both sender and receiver
that make IPsec tunnels more than you say here, e.g., how to construct the
outbound header and what to check in the inner header upon receipt.
Steve
References: