From owner-freebsd-net@FreeBSD.ORG  Wed Apr  2 10:54:03 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 22F9F37B404
	for <freebsd-net@freebsd.org>; Wed,  2 Apr 2003 10:54:03 -0800 (PST)
Received: from math.teaser.net (math.teaser.net [213.91.2.4])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 961AF43F93
	for <freebsd-net@freebsd.org>; Wed,  2 Apr 2003 10:54:01 -0800 (PST)
	(envelope-from e-masson@kisoft-services.com)
Received: from notbsdems.interne.kisoft-services.com
	(nantes.kisoft-services.com [193.56.60.243])
	by math.teaser.net (Postfix) with ESMTP
	id A914E6C820; Wed,  2 Apr 2003 20:53:58 +0200 (CEST)
Received: by notbsdems.interne.kisoft-services.com (Postfix, from userid 1001)
	id E68765AADA; Wed,  2 Apr 2003 20:53:46 +0200 (CEST)
To: Lars Eggert <larse@ISI.EDU>
From: Eric Masson <e-masson@kisoft-services.com>
In-Reply-To: <3E8B0DE1.1030500@isi.edu> (Lars Eggert's message of "Wed, 02
 Apr 2003 08:20:49 -0800")
References: <86pto6mbxj.fsf@notbsdems.interne.kisoft-services.com>
	<05b901c2f881$67e907f0$52557f42@errno.com> <3E8A1122.5040304@isi.edu>
	<86fzp0riwl.fsf@notbsdems.interne.kisoft-services.com>
	<3E8B0DE1.1030500@isi.edu>
X-Operating-System: FreeBSD 4.8-RC i386
Date: Wed, 02 Apr 2003 20:53:46 +0200
Message-ID: <86brzorarp.fsf@notbsdems.interne.kisoft-services.com>
User-Agent: Gnus/5.090017 (Oort Gnus v0.17) XEmacs/21.4 (Common Lisp,
 berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
cc: Sam Leffler <sam@errno.com>
cc: Mailing List FreeBSD Network <freebsd-net@freebsd.org>
Subject: Re: options FAST_IPSEC & tunnels
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2003 18:54:03 -0000

>>>>> "Lars" == Lars Eggert <larse@ISI.EDU> writes:

Hello Lars,

 Lars> what's a pix?

A firewall appliance from cisco :
http://www.cisco.com/warp/public/cc/pd/fw/

 Lars> But chances are, you will need to control both endpoints for my
 Lars> suggestion to work.

In this case, I don't even know if a pix can use transport mode and gre
tunnels. I'll dig in the docs asap.

<Snip explanations regarding ipip tunnels & ipsec modes>

Thanks for the detailled explanation.

Regards

Eric Masson

-- 
 CJ> Les censeurs agitent plus de vent que les moulins des Pays Bas.
 Tiens, je savais pas que c'étaient les moulins qui créaient le vent.
 -+- GR in GNU : Dame qui se shoote et sang chaud pensa -+-