[c-nsp] vpn

Robert E.Seastrom rs at seastrom.com
Sat Sep 3 18:46:58 EDT 2005


Arturo Servin <aservin at remoteconfig.net> writes:

>     I also have a question. You can use AH or ESP but not both at the 
> same time. ESP will authenticate and encrypt while AH will only encrypt. 
> Is it correct?

Backwards.  AH only authenticates.  ESP encrypts (and by extension
authenticates, but as with all crypto, only to the extent to which one
has kept one's keys secure).

                                        ---rob





More information about the cisco-nsp mailing list