RE: IPSEC target and transport mode

[Black_David@emc.com]

Between this and other discussion on the list, I believe that
the IPS WG has rough consensus for tunnel mode as "MUST implement"
and transport mode as "MAY implement".

Thanks,
--David
---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 249-6449 *NEW*      FAX: +1 (508) 497-8500
black_david@emc.com         Cell: +1 (978) 394-7754
---------------------------------------------------

> -----Original Message-----
> From: Bill Studenmund [mailto:wrstuden@wasabisystems.com]
> Sent: Wednesday, April 03, 2002 11:59 AM
> To: Paul Koning
> Cc: ips@ece.cmu.edu
> Subject: Re: IPSEC target and transport mode
> 
> 
> On Wed, 27 Mar 2002, Paul Koning wrote:
> 
> > Tunnel mode enables the use of (separate) security gateways.  It does
> > NOT require them.  It is perfectly reasonable to do end to end
> > security with tunnel mode.  To do so, you terminate the tunnels at the
> > storage nodes.
> 
> Well, I've tried it and it works ok. So I withdraw my strong objection,
> and replace it with minor objection (since we will have interoperability).
> :-)
> 
> Take care,
> 
> Bill
>