OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: IPSec : 2 different tunnels from/to the same subnets ?

From: Cedric Berger (cedricberger.to)
Date: Mon Nov 03 2003 - 08:32:45 CST


Thierry TM. Michalowski wrote:

>>Then you need to decide if you want round-robin, sending
>>all packets duplicated, how you remove duplicates on the
>>receiving and a lot of things like that.
>>
>>
>
>Sure, to me this is routing issues : I don't want to duplicate packets,
>what I want is like having two different network paths (say, switches)
>in between the two subnets .
>Routing is left for another topic :-)
>
>
>>I'm doing something similar, but to do it I've written my own
>>little piece userland code to deal with these issues (I cannot
>>provides the code, sorry)
>>
>>
>
>Are you telling me that you're doing IKE as well?
>
>
I'm "doing" IKE from time to time, but not for that :)

>I'm currently using isakmpd for IKE with X.509 authentification, but
>one one route only.
>I would be happy not to have to rewriter advice appreciated :-)
>
>
What I do is send my packet to /dev/tun0 and have a little userland
daemon there doing the routing. But routing is left for another topic :)
Cedric