RE: Outboard Tunnel Mode

[Black_David@emc.com]

The iSCSI standard will REQUIRE implementation of the
appropriate portions of IPsec.  An iSCSI implementation
that omits all of IPsec will not comply with the standard.
It really is that simple.

Thanks,
--David

---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 435-1000            FAX: +1 (508) 497-8500
black_david@emc.com       Mobile: +1 (978) 394-7754
---------------------------------------------------

> -----Original Message-----
> From: VAHUJA@aol.com [mailto:VAHUJA@aol.com]
> Sent: Monday, December 17, 2001 1:09 PM
> To: ips@ece.cmu.edu
> Subject: Outboard Tunnel Mode
> 
> 
> Folks,
> 
> May be I missed something in SLC meeting.  I can expect several 
> implementations of iSCSI not include any security.Reason - I 
> can see that 
> customers would often rely on the company's existing VPNs 
> (outboard Router 
> etc) to protect their data (storage or otherwise) over IP 
> networks. From a 
> CIO's viewpoint, this approach may make more sense than 
> extending yet another 
> layer of IPSec into its servers just for storage data. 
> 
>  It is not clear to me from the standard if it will be a 
> non-compliance of 
> iSCSI standard. If so, we may potentially have many non-compliances.
>