On 20.09.2011 13:05, Reji wrote:
> Is there any difference/advantage in using an "ip in ip tunnel
> encrypted with ipsec transport mode" over using directly the "ipsec
> tunnel mode".
An IP in IP tunnel has a tunnel device at each end, and the tunnel
creates a virtual point-to-point connection between them. The tunnel may
then be encrypted using IPsec transport mode. Traffic is sent through
the tunnel by routing it to the IP address of the tunnel interface at
the other end.
In IPsec tunnel mode, it appears to the routers as if traffic is simply
routed to the existing gateway. There is no tunnel interface, and the
tunnel definitions at each end decide which traffic is to go through the
tunnel.
|