On Wed, Dec 28, 2005 at 04:26:43PM +0100, Eric Masson wrote: > gif/gre tunnels and ipsec transport mode are quite convenient when > associated with dynamic routing protocols.
OK, I'll buy gif + IPSEC transport mode as an option. [Although in that case, perhaps what you want is an external IPSEC tunnel mode implementation which attaches to a 'tun' device. That's yet another category which I hadn't even considered] I still think that gif + IPSEC tunnel mode (as currently documented) is not a good approach, especially if it's the *only* mode of operation to be documented and hence implicitly recommended as the 'right' way to do it. _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"