Proxy IDs and Tunnel mode Question

[Andrew Sweeney <andy@assured-digital.com>]

Hi,

    I am running a test to ipsec-wit.antd.nist.gov. I am running in
tunnel mode and I am not getting Proxy IDs sent to me during the Quick
mode negotiation. It was my understanding that the proxy IDs are
required in tunnel mode, how else do you know what net you are actually
tunneling to.

    What happens in the case of a host running tunnel mode? Do you just
assume that if there is no proxy ID's and you are in tunnel mode then
this a host and not a gateway? In that case what is to stop a person
from pretending that they are a host but really acting as a gateway and
forwarding all traffic from the tunnel to anywhere?

Thanks
Andy

--

Andrew Sweeney
andy@assured-digital.com
9 Goldsmith Street,
Littleton, MA 01460
http://www.assured-digital.com/

---

Follow-Ups:

• Re: Proxy IDs and Tunnel mode Question
• From: Dan Harkins <dharkins@network-alchemy.com>

---

• Prev by Date: Re: Cookie Requirements
• Next by Date: Re: Proxy IDs and Tunnel mode Question
• Prev by thread: Re: Different Encryption Algorithms for Sned and Receive using I
• Next by thread: Re: Proxy IDs and Tunnel mode Question
• Index(es):
  • Main
  • Thread