[Top] [All Lists]

Re: IPsec and Path MTU

To: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Subject: Re: IPsec and Path MTU
From: "David S. Miller" <davem@xxxxxxxxxx>
Date: Thu, 17 Jun 2004 16:14:03 -0700
Cc: kuznet@xxxxxxxxxxxxx, jmorris@xxxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to: <20040617231241.GB14739@xxxxxxxxxxxxxxxxxxx>
References: <20040615124334.GA25164@xxxxxxxxxxxxxxxxxxx> <20040616195653.GC29781@xxxxxxxxxxxxx> <20040616231317.GA5742@xxxxxxxxxxxxxxxxxxx> <20040617190158.GA10925@xxxxxxxxxxxxx> <20040617213832.GC14089@xxxxxxxxxxxxxxxxxxx> <20040617152921.730892c7.davem@xxxxxxxxxx> <20040617231241.GB14739@xxxxxxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
On Fri, 18 Jun 2004 09:12:41 +1000
Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote:

> In my case, the ICMP message is not coming from the remote IPsec gateway
> or a router in front of it.  It's coming from a host behind it.  So
> the original IP header is in the ICMP message, in the clear.

Remote gateway is supposed to encapsulate the ICMP message and send it
back to the other gateway isn't it?

<Prev in Thread] Current Thread [Next in Thread>