'Re:' - MARC

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipsec
Subject:    Re:
From:       "Amey Gokhale" <agokhale () postmaster ! co ! uk>
Date:       2001-10-18 6:57:37
[Download RAW message or body]

Hello,

next header field(which determines coming payload as IP payload or TCP payload) in \
ESP trailer is in encrypted form hence i don;t think there will be any way to \
determine the mode of ESP packet(transport/tunnel) when packet is in transit.

Regards,
Amey.

On Tue, 16 Oct 2001 14:56:44 -0700
 Bikramjit Singh <BSingh@Nomadix.com> wrote:
> 
> 	is there a way to distinguish tunnel mode from transport mode just
> by looking at an ESP packet.
> 


[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">


<META content="MSHTML 5.50.4134.600" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><FONT size=2>
<P>Hi</P></FONT><FONT size=2>
<P>I am implementing an IPsec masquerading service for vxWorks for our product. 
I had some questions... I would appreciate if somebody could clarify them for 
me.</P></FONT>
<P></P>
<DIR><FONT size=2>
<P>is ISAKMP icookie masquerading acceptable or the remote server has some way 
of distinguishing icookies coming from the source security gateway / 
masquerading gateway and will reject if the masquerading gateway changes the 
icookie value.</P>
<P>is there a way to distinguish tunnel mode from transport mode just by looking 
at an ESP packet.</P>
<P>is there any relation between the ISAKMP icookie and the ESP SPI ( i mean is 
the value of SPI dependent on the icookie value or is it pretty much a random 
selection from a range of unused SPIs).</P></FONT></DIR><FONT size=2>
<P>Thanks a lot</P></FONT>
<P></P><FONT size=2>
<P>-Bik</P></FONT></FONT></DIV>
<P><FONT face=Arial 
size=2>------------------------------------------------------------------------------------------</FONT> \
 <BR><FONT face=Arial size=2>Bik 
Singh&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb \
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 818-575-2518 (Off)</FONT> <BR><FONT face=Arial size=2>Research 
Scientist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 818-597-1502 (Fax)</FONT> <BR><FONT face=Arial size=2>Product 
Development&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;31355 \
 Agoura Road</FONT> <BR><FONT face=Arial size=2>Nomadix 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Westlake Village, CA 91361</FONT> 
</P>
<DIV>&nbsp;</DIV></BODY></HTML>



[prev in list] [next in list] [prev in thread] [next in thread]
Configure | About | News | Add a list | Sponsored by KoreLogic