#3 Add facility to not-encrypt parts of a larger tunnel payload

open
nobody
None
5
2005-09-07
2005-09-07
Roland Pope
No

I have a situation whereby I need to bring up an IPSEC
tunnel for a class b network (IE. tunnel payload subnet
mask is 255.255.0.0), but then I need to access several
parts of this network outside the tunnel.
The MS Ipsec Policy allows you to specify networks to
Not encrypt, which can be parts of a larger network
which IS encrypted. It would be excellent if lsipsectool
had the facility to let you specify these subnets to
exclude from the encryption.

Discussion


Log in to post a comment.