On Sun, 3 Oct 2004, Joe Cooper wrote:

However, using the ip_gre module is more complex than simply inserting ip_wccp, requiring actual configuration of a dummy gre interface. I've found it's easier just to use the decapsulating ip_wccp.

And this is partly why ip_wccp is a kludge, it provides no security what so ever and accepts any WCCP packets routed to the host, no questions asked.


The other reason is the inability to coexists with normal GRE.

Regards
Henrik

Reply via email to