On Sat, 13 Mar 2004, Herbert Xu wrote:
> Pekka Savola <pekkas@xxxxxxxxxx> wrote:
> > I'm interested whether Linux IPsec implementations support:
> >
> > 1) IPv6 payload inside IPv4 IPsec tunnel/transport?
>
> It's not supported directly by the IPsec stack. However, you can
> setup an SIT tunnel over a transport IPv4 IPsec SA.
Is this planned? Are there issues with "native" support why it would
not be feasible?
Avoiding double encapsulation would be IMHO really useful, and several
other implementations are already reported to allow this.
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
|