Subject: Re: gre encap destination = point-to-point destination
To: Michael van Elst <mlelstv@serpens.de>
From: Thor Lancelot Simon <tls@rek.tjls.com>
List: tech-net
Date: 11/08/2006 07:45:17
On Wed, Nov 08, 2006 at 12:52:33AM +0100, Michael van Elst wrote:
> On Tue, Nov 07, 2006 at 05:32:20PM -0500, Thor Lancelot Simon wrote:
> > On Tue, Nov 07, 2006 at 08:39:16PM +0000, Michael van Elst wrote:
> > > tls@rek.tjls.com (Thor Lancelot Simon) writes:
> > > 
> > > >IPsec tunnel mode uses the encapsulation code from gif(4).
> > > 
> > > Just to clarify, this is FAST_IPSEC code, not the regular KAME.
> > 
> > No.  See how far you get with tunnel mode, with a KAME kernel without
> > gif compiled into it.
> 
> I admit that I never tried it before, but it seems to work fine here.

Yes.  This seems to have changed quite a while ago, and I didn't notice.

Thor