Re: iSCSI using IPSEC

[Bill Studenmund <wrstuden@wasabisystems.com>]

On Fri, 22 Mar 2002, Julian Satran wrote:

>
> iSCSI can use  any IPsec implementation. Obviously iSCSI will not be
                                                     IPsec :-)

> implemented at iSCSI level as it sits somewhere else in the stack.  The
> coordination between IPsec and iSCSI is by administrative means and some
> things that should or should not be done (key negotiations, SA use) are
> specified in the IPS security draft.

Put another way, the admin configures iSCSI between two machines. As a
seperate, independant step, the admin configures IPsec between those two
machines. When iSCSI starts up, since it is a TCP protocol, it will use
the IPsec settings between the two machines.

Take care,

Bill