[strongSwan] IPSEC tunnel over IP-IN-IP tunnel issue (two tunnel issue) ---- NETKEY related

Martin Willi martin at strongswan.org
Wed Jan 19 09:55:52 CET 2011

Hi David,

> If IPSEC tunnel over IP-in-IP tunnel is possible?  (NOTE: it is IPSEC
> tunnel over IP-in-IP tunnel rather than IP-in-IP tunnel over Ipsec
> tunnel)!

We never have tried to do such a curious thing, we can't really help
here. You're on your own to try if/how that works.

It is likely to work if the IPsec and IP-in-IP en/decapsulation happens
on different boxes, but might be problematic if not.


More information about the Users mailing list