[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: IPSec Complexity

To: Chris Trobridge <CTrobridge@baltimore.com>
Subject: RE: IPSec Complexity
From: Stephen Kent <kent@bbn.com>
Date: Fri, 18 Feb 2000 12:29:16 -0500
Cc: ipsec@lists.tislabs.com
In-Reply-To: <1FD60AE4DB6CD2118C420008C74C27B81D044A@baltimore.com>
References: <1FD60AE4DB6CD2118C420008C74C27B81D044A@baltimore.com>
Sender: owner-ipsec@lists.tislabs.com

Chris,

If you do IP in IP tunneling, and then  apply transport mode, you 
will suffer the access control problems I described earlier, because 
transport mode IPsec looks only at the outer IP header, not the inner 
one.  Also, you will not be complaint with the IPsec Architecture as 
defined in RFC 2401.

Steve

References:

RE: IPSec Complexity

From: Chris Trobridge <CTrobridge@baltimore.com>

Prev by Date: RE: IPSec Complexity
Next by Date: RE: Future ISAKMP Denial of Service Vulnerablity Needs Addressing
Prev by thread: RE: IPSec Complexity
Next by thread: RE: IPSec Complexity
Index(es):
- Main
- Thread