RE: iSCSI Security: Environment and Requirements

["Saqib Jang" <saqibj@margallacomm.com>]

David,
Thanks for your reponse to the earlier question. Have another
quick question.

> I would offer the caution that some of the possible solutions to the
> rekeying situation may result in tighter binding between iSCSI and
> IPsec that would favor built-in IPsec support and/or require modifications
> to external gateways.  I believe the anticipated IPsec requirement
> is ESP in tunnel mode, but this is also subject to change (e.g.,
> will almost certainly be discussed further in London).

Are iSCSI HBAs considered "gateways" in IPsec terminilogy? Per
RFC 2401, only "gateways" can support only tunnel-mode IPsec, whereas
"hosts' are required to support both tunnel and transport mode IPsec.

Saqib

Saqib Jang
Margalla Communications, Inc.
3301 El Camino Real, Suite 220
Atherton, CA 94027
Ph: 650 298 8462
Fax: 650 851 1613
www.margallacomm.com