Re: [Vyatta-users] IPsec configuration

2007-11-23 Thread Adrian F. Dimcev
Stig wrote You can define multiple tunnels under the same peer to accomplish that. Philippe wrote Yes but it is not an optimal solution in term of scalibility. I would agree with Philippe. If we have multiple local and remote subnets it becomes a little painful. With Cisco's crypto_acl that's

[Vyatta-users] IPsec configuration

2007-11-21 Thread Philippe Marcais
What is the purpose of the following configuration line; tunnel 1 { local-subnet: 192.168.0.0/24 remote-subnet: 10.40.1.0/24 Why does the tunnel has to be link to a local subnet? In fact, I may have multiple local subnet from multiple

Re: [Vyatta-users] IPsec configuration

2007-11-21 Thread Philippe Marcais
, November 21, 2007 5:58 PM *To:* [EMAIL PROTECTED] *Subject:* [Vyatta-users] IPsec configuration What is the purpose of the following configuration line; tunnel 1 { local-subnet: 192.168.0.0/24 remote-subnet: 10.40.1.0/24 Why does

Re: [Vyatta-users] IPsec configuration

2007-11-21 Thread Stig Thormodsrud
Of Philippe Marcais Sent: Wednesday, November 21, 2007 5:58 PM To: [EMAIL PROTECTED] Subject: [Vyatta-users] IPsec configuration What is the purpose of the following configuration line; tunnel 1 { local-subnet: 192.168.0.0/24 remote-subnet

Re: [Vyatta-users] IPsec configuration

2007-11-21 Thread Justin Fletcher
Just routing - you're identifying which traffic sources and destinations that are tunneled. Best, Justin On Nov 21, 2007 5:57 PM, Philippe Marcais [EMAIL PROTECTED] wrote: What is the purpose of the following configuration line; tunnel 1 { local-subnet: