Can IPSec ESP be nested in another ESP?
Son Phan <[email protected]> Tue, 28 Sep 2004 09:52:59 +0200 (CEST)
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
Hello, I understand that AH & ESP mode can be applied together for the same IP packet. However I don't know whether two ESP can be nested. The case is as below: PC-------------------------------VPN GW-------------Application Server (AS) <<------ESP tunnel mode----->> <<-------------ESP transport mode ------------------->> PC has remote access to some closed domain using via VPN GW. ESP tunnel mode is used here. One of the application running on this PC want to use a service provided by an AS within this closed domain. However this service mandates the client to use ESP transmode mode to contact it. Can this scenario works? Any extra requirement toward the IPSec implementation on PC? Thanks, Son