Date: Fri, 22 Nov 2002 18:10:29 +0100 (CET) From: Helge Oldach <freebsd-stable-21nov02@oldach.net> To: larse@ISI.EDU (Lars Eggert) Cc: freebsd-stable-21nov02@oldach.net, mcambria@avaya.com, archie@dellroad.org, guido@gvr.org, dkelly@hiwaay.net, hausen@punkt.de, sullrich@CRE8.COM, greg.panula@dolaninformation.com, FreeBSD-stable@FreeBSD.ORG Subject: Re: IPsec/gif VPN tunnel packets on wrong NIC in ipfw? SOLUTION A ND QUESTIONS Message-ID: <200211221710.gAMHAToS093802@sep.oldach.net> In-Reply-To: <3DDE600D.1080509@isi.edu> from Lars Eggert at "Nov 22, 2002 11:49:17 am"
next in thread | previous in thread | raw e-mail | index | archive | help
Lars Eggert: > > In practice the problem presented in the paper is commonly solved > > in a different fashion: By using GRE or IPIP encapsulation *plus* > > tunnel mode. > Why tunnel mode, specifically? Policy reasons, mentioned in my example: Enterprise networks tend to deploy RFC 1918 addresses also for transit links, in which case one cannot use transport mode. Helge To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200211221710.gAMHAToS093802>