From: Alaa Dalghan
Date: Fri Sep 16 2005 - 08:36:20 EST
I have an OpenSWAN (2.3.1) box accepting ipsec tunnels from wireless
(802.11) clients equipped with Linux and Windows XP.
Wireless clients are using the openswan gateway to exchange data securely
between each other, so there are no direct tunnels between client
The gateway is doing the routing job fine but there is a security gap when
it has to decrypt data sent by a given client and then reencrypt it before
sending it to the ultimate destination. It may be better not to expose the
data in the clear at the gateway.
I know this can be solved by using double encryption (tunnel inside a
tunnel), but, I wonder if there is a better alternative?
I was thinking of using L2TP/IPSec tunnels instead of pure IPSec tunnels,
and then, maybe I can use L2TP encryption to encrypt end-to-end and IPSec
encryption to encrypt end-to-gateway. Would this work?
I appreciate any help and advices.
Don?t just search. Find. Check out the new MSN Search!
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html