RE: Can IPSec ESP be nested in another ESP?

"Son Phan" <[email protected]> Fri, 01 Oct 2004 11:07:03 +0200
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Thanks for many infomative answers!


Br, Son
===============
On Tue, Sep 28, 2004 at 09:52:59AM +0200, Son Phan wrote:
>Hello,
>
>I understand that AH & ESP mode can be applied together for the same IP 
>packet.
>
>However I don't know whether two ESP can be nested. The case is as below:
>
>PC-------------------------------VPN GW-------------Application Server (AS)
><<------ESP tunnel mode----->>
><<-------------ESP transport mode ------------------->>
>
>PC has remote access to some closed domain using via VPN GW. ESP tunnel 
>mode is used here.
>One of the application running on this PC want to use a service provided by 
>an AS within this closed domain. However this service mandates the client 
>to use ESP transmode mode to contact it.
>
>Can this scenario works?
>Any extra requirement toward the IPSec implementation on PC?
>
>Thanks, Son

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail