RE: IPsec VPN with no GRE tunnel

From: Mas Kato (tealp729@xxxxxxxx)
Date: Sun May 20 2001 - 19:38:48 GMT-3


   
Depending on the routing protocol, would 'no validate-update-source' be
of any use?

Regards,

Mas

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Justin Menga
Sent: Sunday, May 20, 2001 1:26 PM
To: 'mascot net'; ccielab@groupstudy.com
Subject: RE: IPsec VPN with no GRE tunnel

Dynamic routing protocols typically need a 'locally' connected
connection -
in other words, two devices on the same logical IP subnet - in this way
they
can exchange routes and check for neighbors being alive. If you have
disaparate devices with other devices in the middle (e.g. Internet),
then
the only way to provide the logical interface is to use a tunnel
interface....

Regards,

Justin Menga CCIE #6640 CCNP+Voice+ATM CCDP MCSE+I CCSE
Network and Security Consultant
Computerland New Zealand
PO Box 3631, Auckland
DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
mailto: justin.menga@computerland.co.nz
web: http://www.computerland.co.nz

CAUTION: This e-mail message and accompanying data may contain
information
that is confidential and subject to privilege. If you are not the
intended
recipient, you are notified that any use, dissemination, distribution or
copying of this message or data is prohibited. If you have received
this
e-mail in error, please notify me immediately and delete all material
pertaining to this e-mail. Thank you.

-----Original Message-----
From: mascot net [mailto:mascotnet@yahoo.com]
Sent: Monday, 21 May 2001 7:51 a.m.
To: ccielab@groupstudy.com
Subject: Re: IPsec VPN with no GRE tunnel

Tim,

Could you explain why can't routing info. pass without
the tunnel.

tks,
MN

--- Tim O'Brien <tobrien@cinci.rr.com> wrote:
> sure... you would really only need the tunnel if you
> wanted to pass routing
> information.
>
> Tim
>
> ----- Original Message -----
> From: "mascot net" <mascotnet@yahoo.com>
> To: <ccielab@groupstudy.com>
> Sent: Sunday, May 20, 2001 1:09 PM
> Subject: IPsec VPN with no GRE tunnel
>
>
> Is it possible to create a VPN with just IPsec only
> (no GRE tunnel).
>
> tks
> MN
>



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:47 GMT-3