Re: IPsec question

From: Kevin Baumgartner (kbaumgar@xxxxxxxxx)
Date: Wed Sep 13 2000 - 23:12:49 GMT-3


   
 So how are you going to do the key exchange to setup the tunnel
if you don't use isakmp or some other key-exchange method.
That's the problem I have with the CCO document. It keeps isakmp
and IPSEC as seperate documents but you need both for IPSEC to work.

 Kevin

>
> Thanks David, but I was looking for one with no isakmp commands. No
> particular reason....CCO just says these commands are optional - I'm
> wondering how this can be done.
> -Jeff
>
> -----Original Message-----
> From: David H. Brown [mailto:DHBrown@PipeLine.com]
> Sent: Wednesday, September 13, 2000 9:45 PM
> To: c_SapirJe@BAM.com; ccielab@groupstudy.com
> Subject: RE: IPsec question
>
>
> Here is a quick scenario I made up today (with configs). It is not pretty,
> let me know if you have any questions. I will try to make a better drawing
> and post it in the zip file.
>
> It's attached or: http://www.pipeline.com/~dhbrown/IPSec.zip
>
> David
> (RTP lab 9/18)
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> c_SapirJe@BAM.com
> Sent: Wednesday, September 13, 2000 7:35 PM
> To: ccielab@groupstudy.com
> Subject: IPsec question
>
>
> In the docs it says you can configure IPsec without IKE, but there are no
> examples. I tried it and I get the message - warning - no key! by
> following the example in the IPsec configuration section (says it's a
> partial config). I'd like to see a complete but minimalist crypto config.
> Any takers?
> -Jeff
>



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:24:55 GMT-3