tunnel mode ipip and VPN's

From: cdmurray@xxxxxxxxxxxxxxx
Date: Tue Jan 16 2001 - 07:36:05 GMT-3


   

It's a hard one and I would take Alan Basinger's advice if you encounter
this one
because there are some terms that implicate the use of certain
protocols/features/parameters
but do not spell them out.
I am inclined to think that VPN does not imply encryption because not all
data is sensitive.
Some people use VPNs to send e-mail and simply take advantage of the the
cost savings
of using someone else's infrastructure to traverse .
But then leave no stone unturned so take Alan's advice.
Practice asking intelligent questions by presenting them on this list .

Christine Murray
Enterprise Technology Team
Level 3, 338 Pitt, Sydney 2000
State Street Australia Ltd
Ph: 612-93236124

                    "Raymond

                    Cheung" To: "Chuck Church" <cchurch@MAGNAC
OM.com>
                    <rcheung@slb. cc: "CCIE Mail List" <ccielab@grou
pstudy.com>
                    com> Subject: RE: tunnel mode ipip

                    Sent by:

                    nobody@groups

                    tudy.com

                    16/01/2001

                    07:38 AM

                    Please

                    respond to

                    "Raymond

                    Cheung"

That's absolutely not true. In the lab, encryption is not required unless
you are asked to do so.

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Chuck Church
Sent: Monday, January 15, 2001 1:41 PM
To: ccielab@groupstudy.com
Subject: RE: tunnel mode ipip

But if they use the term 'VPN', to me that implies using encryption,
whether
IPSec or CET. Is that everyone else's take on the term?

Chuck Church
CCNP, CCDP, MCNE, MCSE
Sr. Network Engineer
Magnacom Technologies
140 N. Rt. 303
Valley Cottage, NY 10989
845-267-4000 x218

-----Original Message-----
From: Robert DeVito [mailto:robertdevito@hotmail.com]
Sent: Monday, January 15, 2001 12:09 PM
To: ashort@wingedwheel.net; ccielab@groupstudy.com
Subject: RE: tunnel mode ipip

Only if it specifies to use encryption, though.

----Original Message Follows----
From: Andrew Short <ashort@wingedwheel.net>
Reply-To: Andrew Short <ashort@wingedwheel.net>
To: ccielab@groupstudy.com
Subject: RE: tunnel mode ipip
Date: Mon, 15 Jan 2001 10:17:10 -0600 (CST)

On Mon, 15 Jan 2001, Tom Gonter wrote:

> Here's a reason. You're running addresses in the 10.0.0.0 space and a
> partner company is using addresses in the 10.0.0.0 space or other
private
> space (192.168.0.0,etc...). Private networks aren't routable in the
> Internet. However, you can tunnel ip across the Internet to get to
those
> distant private networks.

Yeah, but I'd use IPSec tunnel mode for that.

>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Chuck Church
> Sent: Monday, January 15, 2001 6:52 AM
> To: ccielab@groupstudy.com
> Subject: RE: tunnel mode ipip
>
>
> But if it's IP only, do you need to use a tunnel? All the times I've
setup
> VPN between router to router or PIX to PIX, we've never used a tunnel.
> Obviously if they want non-IP traffic, use a tunnel, but if it's IP
only,
> why use one? What's the way the lab proctor is going to want to see it?
>
> Chuck Church
> CCNP, CCDP, MCNE, MCSE
> Sr. Network Engineer
> Magnacom Technologies
> 140 N. Rt. 303
> Valley Cottage, NY 10989
> 845-267-4000 x218
>
>
>
> -----Original Message-----
> From: Kevin Mahoney [mailto:kmahoney1@cfl.rr.com]
> Sent: Monday, January 15, 2001 1:31 AM
> To: Robert DeVito; ccielab@groupstudy.com
> Subject: RE: tunnel mode ipip
>
>
> yep
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Robert DeVito
> Sent: Monday, January 15, 2001 6:13 AM
> To: kmahoney1@cfl.rr.com; ccielab@groupstudy.com
> Subject: RE: tunnel mode ipip
>
>
> So if I come over a scenario that requires to set up a VPN from router A
to
> router B for IP only, use "tunnel mode ipip" instead of the default
"tunnel
> mode gre"?
>
> Thanks in advanced,
> Robert
>
>
> ----Original Message Follows----
> From: "Kevin Mahoney" <kmahoney1@cfl.rr.com>
> Reply-To: <kmahoney1@cfl.rr.com>
> To: "Robert DeVito" <robertdevito@hotmail.com>, <ccielab@groupstudy.com>
> Subject: RE: tunnel mode ipip
> Date: Mon, 15 Jan 2001 00:50:10 -0500
>
> Tunnel mode ipip is foe setting up VPNs where you want to tunnel ip
traffic
> over an ip tunnel.
>
> Kevin
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Robert DeVito
> Sent: Monday, January 15, 2001 4:46 AM
> To: ccielab@groupstudy.com
> Subject: tunnel mode ipip
>
>
> Can someone explain tunnel mode ipip? I can not find anything on the CD
or
> CCO... Thank you!
>
> Robert



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:31 GMT-3