From: Larson, Chris (Contractor) (Chris.Larson@xxxxxx)
Date: Fri May 17 2002 - 15:41:26 GMT-3
You can't encrypt IPX by itself. You must put it in a gre tunnel and then
encrypt the gre tunnel.
-----Original Message-----
From: Dan.Thorson@seagate.com [mailto:Dan.Thorson@seagate.com]
Sent: Thursday, May 16, 2002 10:40 PM
To: tobrien@cinci.rr.com
Cc: Groupstudy ccielab list; Dan.Thorson@seagate.com; Carlos G Mendioroz
Subject: RE: Ipsec over gre tunnel
Tim said:
> So, is it better to encrypt the GRE traffic (encrypt the tunnel itself)
or
> is it better to specify the traffic, encrypt it, and then send it through
> the GRE tunnel?
Well, I know how to do the 1st, but don't know how to do the 2nd! <grin>
Your 2nd option (is it possible?) would require separately encrypting the
IP & IPX traffic flows prior to encapsulating them, which seems more
cpu-intensive. Again, I don't know how I'd do it...
danT
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:59:00 GMT-3