Re: [Vtun-devel] RFC-3378
Status: Inactive
Brought to you by:
mtbishop
From: Guus S. <gu...@sl...> - 2002-11-19 17:37:36
|
On Tue, Nov 19, 2002 at 05:45:44PM +0300, Alexander Voropay wrote: > RFC-3378 EtherIP: Tunneling Ethernet Frames in IP Datagrams. > R. Housley, S. Hollenbeck. September 2002. This is the same as IPIP, but then to encapsulate Ethernet frames in IP packets. Why they wrote an RFC for this while there already is GRE is beyond me. Anyway, this protocol isn't really suited for VPNs: - it doesn't support encryption (you either have to use IPsec to encrypt the outer IP frame or encrypt the traffic beforehand). - it doesn't work through NATs - you cannot run more than one "EtherIP tunnel" between two hosts at the same time --=20 Met vriendelijke groet / with kind regards, Guus Sliepen <gu...@sl...> |