RE: Can IPSec ESP be nested in another ESP?
"Son Phan" <[email protected]> Fri, 01 Oct 2004 11:07:03 +0200
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
Thanks for many infomative answers! Br, Son =============== On Tue, Sep 28, 2004 at 09:52:59AM +0200, Son Phan wrote: >Hello, > >I understand that AH & ESP mode can be applied together for the same IP >packet. > >However I don't know whether two ESP can be nested. The case is as below: > >PC-------------------------------VPN GW-------------Application Server (AS) ><<------ESP tunnel mode----->> ><<-------------ESP transport mode ------------------->> > >PC has remote access to some closed domain using via VPN GW. ESP tunnel >mode is used here. >One of the application running on this PC want to use a service provided by >an AS within this closed domain. However this service mandates the client >to use ESP transmode mode to contact it. > >Can this scenario works? >Any extra requirement toward the IPSec implementation on PC? > >Thanks, Son _________________________________________________________________ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail