[strongSwan] IPSEC tunnel over IP-IN-IP tunnel issue (two tunnel issue) ---- NETKEY related

[Martin Willi]

Hi David,

> If IPSEC tunnel over IP-in-IP tunnel is possible?  (NOTE: it is IPSEC
> tunnel over IP-in-IP tunnel rather than IP-in-IP tunnel over Ipsec
> tunnel)!

We never have tried to do such a curious thing, we can't really help
here. You're on your own to try if/how that works.

It is likely to work if the IPsec and IP-in-IP en/decapsulation happens
on different boxes, but might be problematic if not.

Regards
Martin