Re: [Infrahip] Re: [hipl-users] Re: [PATCH 2.6.12.2] XFRM: BEET IPsec mode for Linux
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-07-29 23:48:59
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-07-29 23:48:59
On Fri, Jul 29, 2005 at 05:45:24PM +0200, Pekka Nikander wrote:
quoted
Surely BEET will work also for AH with minor changes, even though we only tried the ESP encapsulation.I wouldn't be so sure. IIRC, tunnel mode is not specified for AH but for ESP only. Consequently, defining BEET mode for AH might be
Well plain tunnel mode certainly is specified for AH as well as IPComp. But you're right the semantics of BEET mode for AH needs to be thought out. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt