Re: ipsec(4) routing for a branch offices

2007-10-18 Thread Brian A Seklecki (Mobile)
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian A. Seklecki Sent: Thursday, October 18, 2007 2:02 AM To: misc@openbsd.org Subject: ipsec(4) routing for a branch offices On a variety of 3rd party platforms, I often establish an SA between two IPSec devices with a /16 of RFC 1918

ipsec(4) routing for a branch offices

2007-10-17 Thread Brian A. Seklecki
On a variety of 3rd party platforms, I often establish an SA between two IPSec devices with a /16 of RFC 1918 space on one side and a /24 on the other (sometimes as much as a /19). This uneven size subnet arrangement prevents the need for full-mesh in a large corporate network. It allows for