Date: Thu, 14 Jun 2012 12:36:40 -0700 From: Adrian Chadd <adrian@freebsd.org> To: "Eugene M. Zheganin" <emz@norma.perm.ru>, freebsd-net@freebsd.org Subject: Re: if_ipsec Message-ID: <CAJ-Vmo=WLtejb%2BLsDbdSPaVaZHQH1AnRUbU5GmNYS0G5GAQiRw@mail.gmail.com> In-Reply-To: <20120614155748.GC40355@felucia.tataz.chchile.org> References: <4FD236D4.6090409@norma.perm.ru> <20120609170721.GA40355@felucia.tataz.chchile.org> <4FD98EC1.50200@norma.perm.ru> <20120614155748.GC40355@felucia.tataz.chchile.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hm, I remember some reasons down in the deep, distant past as to why ipsec implementations moved away from tunnel mode == tunnel interfaces. When I was being a network engineer during the day, I constantly hated having to implement tunnels using traffic maps rather than actual interfaces. Chances are bz@ would know. I suggest asking him. Adrian
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJ-Vmo=WLtejb%2BLsDbdSPaVaZHQH1AnRUbU5GmNYS0G5GAQiRw>