[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: VoIP/ESP+AH


On Saturday, Feb 22, 2003, at 09:19 America/Montreal, Iljitsch van Beijnum wrote:
But you can't do routing over IPsec tunnels, so you need another GRE tunnel.
That's untrue.  Nothing prevents one from routing over an IPsec tunnel,
in fact it is quite commonly deployed.  One might choose not to do so,
as a matter of policy, but there is nothing in ESP/AH that prevents
one from doing so.

And I know folks who deployed VoIP/ESP+AH several years ago.  It works
fine -- and the encryption is not implemented inside the phone.

Mind, neither the original posting nor this followup is tremendously
on-topic for this list.

Ran