Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #613 > unrolled thread

Ipsec tunnel mode vs ip in ip with ipsec transport

Started byReji <rejithomas.d@gmail.com>
First post2011-09-20 04:05 -0700
Last post2011-09-20 18:29 +0200
Articles 2 — 2 participants

Back to article view | Back to comp.os.linux.networking


Contents

  Ipsec tunnel mode vs ip in ip with ipsec transport Reji <rejithomas.d@gmail.com> - 2011-09-20 04:05 -0700
    Re: Ipsec tunnel mode vs ip in ip with ipsec transport KR <kristian.rasmussen@broadpark.no.spam.com> - 2011-09-20 18:29 +0200

#613 — Ipsec tunnel mode vs ip in ip with ipsec transport

FromReji <rejithomas.d@gmail.com>
Date2011-09-20 04:05 -0700
SubjectIpsec tunnel mode vs ip in ip with ipsec transport
Message-ID<b9de21b8-26d5-430d-a139-b115e9fe60a8@ge10g2000vbb.googlegroups.com>
Is there any difference/advantage in using an "ip in ip tunnel
encrypted with ipsec transport mode"  over using directly the "ipsec
tunnel mode".

[toc] | [next] | [standalone]


#614

FromKR <kristian.rasmussen@broadpark.no.spam.com>
Date2011-09-20 18:29 +0200
Message-ID<4e78bf81$1@news.broadpark.no>
In reply to#613
On 20.09.2011 13:05, Reji wrote:
> Is there any difference/advantage in using an "ip in ip tunnel
> encrypted with ipsec transport mode"  over using directly the "ipsec
> tunnel mode".

An IP in IP tunnel has a tunnel device at each end, and the tunnel
creates a virtual point-to-point connection between them. The tunnel may
then be encrypted using IPsec transport mode. Traffic is sent through
the tunnel by routing it to the IP address of the tunnel interface at
the other end.

In IPsec tunnel mode, it appears to the routers as if traffic is simply
routed to the existing gateway. There is no tunnel interface, and the
tunnel definitions at each end decide which traffic is to go through the
tunnel.

[toc] | [prev] | [standalone]


Back to top | Article view | comp.os.linux.networking


csiph-web