nanog mailing list archives
AH or ESP
From: Glen Kent <glen.kent () gmail com>
Date: Fri, 22 May 2009 22:34:41 +0530
Hi, It is well known in the community that AH is NAT unfriendly while ESP cannot be filtered, and most firewalls would not let such packets pass. I am NOT interested in encrypting the data, but i do want origination authentication (Integrity Protection). Do folks in such cases use AH or ESP-NULL, given that both have some issues? Thanks, Glen
Current thread:
- AH or ESP Glen Kent (May 22)
- Re: AH or ESP Christopher Morrow (May 22)
- Re: AH or ESP Glen Kent (May 22)
- <Possible follow-ups>
- Re: AH or ESP Jack Kohn (May 25)
- Re: AH or ESP Merike Kaeo (May 25)
- Re: AH or ESP Jack Kohn (May 25)
- Re: AH or ESP Glen Kent (May 25)
- Re: AH or ESP Merike Kaeo (May 25)
- Re: AH or ESP Jack Kohn (May 25)
- Re: AH or ESP Merike Kaeo (May 25)
- Re: AH or ESP Randy Bush (May 26)
- Re: AH or ESP Merike Kaeo (May 25)
- Re: AH or ESP Christopher Morrow (May 22)