Zum Hauptinhalt springen

1.1.1. Security Gateway to Security Gateway in Tunnel Mode

1.1.1. Security Gateway to Security Gateway in Tunnel Mode​

         +-+-+-+-+-+            +-+-+-+-+-+
         |         | IPsec      |         |

Protected |Tunnel | tunnel |Tunnel | Protected Subnet <-->|Endpoint |<---------->|Endpoint |<--> Subnet | | | | +-+-+-+-+-+ +-+-+-+-+-+

   Figure 1:  Security Gateway to Security Gateway Tunnel

In this scenario, neither endpoint of the IP connection implements IPsec, but network nodes between them protect traffic for part of the way. Protection is transparent to the endpoints, and depends on ordinary routing to send packets through the tunnel endpoints for processing. Each endpoint would announce the set of addresses "behind" it, and packets would be sent in tunnel mode where the inner IP header would contain the IP addresses of the actual endpoints.

Letztes Update am