Re: Ipsec over gre tunnel

From: elpingu (elping@xxxxxxxxxx)
Date: Fri May 17 2002 - 00:17:21 GMT-3


   
well:
from what I undestand ......and my understanding is small

for number one
if one is to encrypt non ip traffic or routing protocols then one would
encrypt the tunnel and send the traffic.

number 2
it is possible to encrypt the traffic and send it though the tunnel but only
for ip traffic.

so I say depending on what is the task one would use the proper technology.

Dan.Thorson@seagate.com wrote:

> Tim said:
>
> > So, is it better to encrypt the GRE traffic (encrypt the tunnel itself)
> or
> > is it better to specify the traffic, encrypt it, and then send it through
> > the GRE tunnel?
>
> Well, I know how to do the 1st, but don't know how to do the 2nd! <grin>
>
> Your 2nd option (is it possible?) would require separately encrypting the
> IP & IPX traffic flows prior to encapsulating them, which seems more
> cpu-intensive. Again, I don't know how I'd do it...
>
> danT



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:59 GMT-3