RE:iSCSI: Outboard Tunnel Mode

["Lakshmi Ramasubramanian" <nramas@windows.microsoft.com>]

If it is NOT MUST USE, I guess most implementations would just 
choose "None" for security options. What is the point in saying 
MUST IMPLEMENT but is NOT MUST USE?

 -lakshmi

-----Original Message-----
From: John Hufferd [mailto:hufferd@us.ibm.com] 
Sent: Monday, December 17, 2001 11:13 AM
To: VAHUJA@aol.com
Cc: ips@ece.cmu.edu
Subject: Re: Outboard Tunnel Mode



Installations can do what ever they want.  The Security functions are
must implement, NOT must use.

.
.
.
John L. Hufferd
Senior Technical Staff Member (STSM)
IBM/SSG San Jose Ca
Main Office (408) 256-0403, Tie: 276-0403,  eFax: (408) 904-4688 Home
Office (408) 997-6136, Cell: (408) 499-9702 Internet address:
hufferd@us.ibm.com


VAHUJA@aol.com@ece.cmu.edu on 12/17/2001 10:09:10 AM

Sent by:  owner-ips@ece.cmu.edu


To:   ips@ece.cmu.edu
cc:
Subject:  Outboard Tunnel Mode



Folks,

May be I missed something in SLC meeting.  I can expect several
implementations of iSCSI not include any security.Reason - I can see
that customers would often rely on the company's existing VPNs (outboard
Router
etc) to protect their data (storage or otherwise) over IP networks. From
a CIO's viewpoint, this approach may make more sense than extending yet
another layer of IPSec into its servers just for storage data.

 It is not clear to me from the standard if it will be a non-compliance
of iSCSI standard. If so, we may potentially have many non-compliances.