[c-nsp] IP Tunneling Question

[Ge Moua]

What seems to be gaining popularity is a "GRE-like" tunnel with IPSec 
encapsulation; Cisco calls this "IPSec VTI"; caveat is that equipment in 
question may need to be Csico based.

Regards,
Ge Moua | Email: moua0100 at umn.edu

Network Design Engineer
University of Minnesota | Networking & Telecommunications Services



Charles Wyble wrote:
> All,
>
>
> I'm looking to setup a VPN with a couple colocation providers who are 
> friends of mine, and have some under utilized address space. They are 
> supporting some security research I am doing (a darknet/honeynet). [1]
>
> I am exploring different options to utilize that IP space on my lab 
> servers.
>
> How do folks typically accomplish IP tunneling? IPSEC tunnels? Do you 
> use GRE? What about OpenVPN?
>
> I can easily setup any of the above mentioned approaches as howtos 
> abound. Just wondering if there is anything to consider for this 
> scenario to reduce overhead and packet molestation as much as possible.
>
> Thanks.
>
> [1] If more information is desired please see my blog at 
> http://cnwccxx.blogspot.com/ I'll be posting there on various 
> visualization tools and methodologies etc.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/