ICMP | IPSec (2nd Edition)

ICMP processing is critical to the operation and debugging of a network. When IPSec is used end-to-end, it does not impact ICMP. How ever, when IPSec is used in tunnel mode, it impacts ICMP and the operation of the network. The problem arises in the tunnel mode, particularly when the tunnel header is added by an intermediate gateway. This is because ICMP messages are required to send only 64 bits of the original header. When the gateway adds the tunneled header and the IPSec header, the inner IP header and hence the actual source is not present in the ICMP error message. The gateway will not be able to forward the message appropriately.

In order to handle ICMP error messages correctly, IPSec needs to maintain some state and perform extra processing. This is discussed in greater detail in the implementation chapter.

Top

Table of content

IPSec(c) The New Security Standard for the Internet, Intranets, and Virtual Private Networks

IPSec (2nd Edition)

ISBN: 013046189X
EAN: 2147483647

Year: 2004
Pages: 76

Authors: Naganand Doraswamy, Dan Harkins

BUY ON AMAZON

Pocket Guide to the National Electrical Code(R), 2005 Edition (8th Edition)

InDesign Type: Professional Typography with Adobe InDesign CS2

Junos Cookbook (Cookbooks (OReilly))

HTI+ Home Technology Integrator & CEDIA Installer I All-In-One Exam Guide

Python Standard Library (Nutshell Handbooks) with

User Interfaces in C#: Windows Forms and Custom Controls