Re: SOI QUESTIONS: 2.3 Authentication styles

["Chinna N.R. Pellacuru" <pcn@cisco.com>]

By IPsec I mean in the context of RFC 2401. In any design review, this
minimal 'static packet filtering' is brought up as a mandatory requirement
of "IPsec", and the rest of the folks who don't know IPsec intimately,
start scratching their heads, and generally ask WHY?, and we generally
say, it is mandatory, just don't ask why. We just play the RFC 2401 card,
just like it is done so efficiently in this forum, without answering why
it is required.

    chinna

On Thu, 20 Jun 2002, Henry Spencer wrote:

> On Thu, 20 Jun 2002, Chinna N.R. Pellacuru wrote:
> > ...is much better than saying that IPsec mandates this minimal
> > 'static packet filtering' and everyone has to do it in IPsec.
>
> What does it mean to do something "in IPsec"?  IPsec is a set of
> protocols, not a hardware box or a software module.
>
>                                                           Henry Spencer
>                                                        henry@spsystems.net
>