[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re: Does an outbound packet need to be reroute?

To: dxh <sleepy-cat@263.net>
Subject: Re: Re: Does an outbound packet need to be reroute?
From: Puja Puri <puja.puri@cdac.ernet.in>
Date: Wed, 10 Oct 2001 10:59:28 +0530 (IST)
cc: Alexey Vyskubov <alexey.vyskubov@nokia.com>, "ipsec@lists.tislabs.com" <ipsec@lists.tislabs.com>
In-Reply-To: <200110090203.KAA15413@csnet1>
Sender: owner-ipsec@lists.tislabs.com

i think Nested Tunnels can be implemented using both nested SAs and SPs.
Just have a look at RFC 2401 "Basic Combinations of Security
Associations",case 3. In this case nested SPs will also be required.

rgds
puja

Puja Puri
Member of Technical Staff
Networking and Internet  Software Group
C-DAC
Pune

On Tue, 9 Oct 2001, dxh wrote:

> >
> >As far as I understand RFC 2401 says that only one SP should be applied
> >to the packet. Nested tunnels are implemented using nested SAs not SPs.
> >
> >Am I wrong?
> >
> >-- 
> >Alexey
> I agree with you. What is your opinion about my question ?
> 
> 
> 
> Dong Xiaohu
> 
>

References:

Re: Re: Does an outbound packet need to be reroute?

From: dxh <sleepy-cat@263.net>

Prev by Date: RE: IPSec still too slow?
Next by Date: I-D ACTION:draft-jenkins-ipsec-tun-mon-mib-00.txt
Next by thread: RE: Initial Contact Message in IKE
Index(es):
- Main
- Thread