[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPSec over GRE why ?



On 2/25/2003 1:01 PM, Derek Atkins wrote:
> 
> Tunneling GRE within IPsec would work, but I would only suggest it if
> you are trying to tunnel non-IP packets.  If you're just trying to
> tunnel IP packets, then just use IPsec's tunnel-mode and be done with
> it.

Not if existing dynamic routing protocols are required inside the 
virtual topology. See draft-touch-ipsec. (Details in my earlier reply.)

Lars
-- 
Lars Eggert <larse@isi.edu>           USC Information Sciences Institute

S/MIME Cryptographic Signature