From: Joe Deleonardo (jdeleonardo@cox.net)
Date: Tue Jul 15 2003 - 15:38:00 GMT-3
About the only reason I can think of is if you had a requirement to use ah and
you weren't allowed to do NAT before IPSec and NAT Transparency is not an
option.
----- Original Message -----
From: Joe Deleonardo
To: cciesecurity@yahoogroups.com ; ccielab@groupstudy.com ;
security@groupstudy.com
Sent: Tuesday, July 15, 2003 10:08 AM
Subject: IPSec over GRE -vs- GRE over IPSec
IPSec over GRE -vs- GRE over IPSec.
Alright is this just a play on words or what? GRE over IPSec makes sense,
it's used to transport non unicast traffic.
But why would you want to do IPSec over GRE. Does anyone have a link to a
config example? ... if it's something?
Thanks,
Joe
This archive was generated by hypermail 2.1.4 : Wed Aug 06 2003 - 06:52:40 GMT-3