[strongSwan] IPSEC tunnel over IP-IN-IP tunnel issue (two tunnel issue) ---- NETKEY related

[David Deng]

Hi Martin,


Thank you for you prompt response!

Actually, I have encountered many problem when I use the IPSEC tunnel
over IP-in-IP en/decapsulation on the same box.

However, I think I will continue to find out what caused this problem.

Anyway, Thank you for your help!



Best wishes,

David Morris
------------------------------------------------------------------------------------------------------------------------------
2011/1/19 Martin Willi <martin at strongswan.org>

> Hi David,
>
> > If IPSEC tunnel over IP-in-IP tunnel is possible?  (NOTE: it is IPSEC
> > tunnel over IP-in-IP tunnel rather than IP-in-IP tunnel over Ipsec
> > tunnel)!
>
> We never have tried to do such a curious thing, we can't really help
> here. You're on your own to try if/how that works.
>
> It is likely to work if the IPsec and IP-in-IP en/decapsulation happens
> on different boxes, but might be problematic if not.
>
> Regards
> Martin
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20110120/bae39a4c/attachment.html>