SORT BY:

LIST ORDER
THREAD
AUTHOR
SUBJECT


SEARCH

IPS HOME


    [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

    RE: iSCSI: IPsec tunnel / transport mode decision



    Saqib,
    
    Mandatory transport mode would make bundling of external IPSec
    impossible, while tunnel mode is not more difficult to implement
    within the iSCSI endpoint than transport mode.
    
    "Cost of ownership and complexity of deploying a stand-alone
    IPsec gateway" might be among the considerations of vendors and
    customers, but I don't think the standard should block such
    solutions (and  it blocks more than just stand-alone IPsec
    gateway).
    
      Regards,
       Ofer
    
    
    Ofer Biran
    Storage and Systems Technology
    IBM Research Lab in Haifa
    biran@il.ibm.com  972-4-8296253
    
    
    "Saqib Jang" <saqibj@margallacomm.com> on 02/11/2001 20:59:03
    
    Please respond to <saqibj@margallacomm.com>
    
    To:   "Bill Strahm" <bill@sanera.net>, "CAVANNA,VICENTE V
          (A-Roseville,ex1)" <vince_cavanna@agilent.com>
    cc:   "SHEEHY,DAVE (A-Americas,unix1)" <dave_sheehy@agilent.com>, Ofer
          Biran/Haifa/IBM@IBMIL, <ips@ece.cmu.edu>
    Subject:  RE: iSCSI: IPsec tunnel / transport mode decision
    
    
    
    What about the cost of ownership and complexity of deploying
    a stand-alone IPsec gateway for use with IPsec end-points?
    If transport-mode IPsec is a must-to-implement capability in
    iSCSI end-points there is an opportunity to have much
    more coherent security for iSCSI.
    
    Saqib
    
    
    
    


Home

Last updated: Sun Nov 04 15:17:35 2001
7548 messages in chronological order