New answers tagged

1 vote

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

The main point is that the tunneled packets are encapsulated and encrypted on the tunnel entrance (using ESP), and decrypted and decapsulated in their original form on exit. The outer packet is used ...
user avatar
  • 69.5k
2 votes
Accepted

IPSEC ESP tunnel mode - Are the ip addresses in outer IP HDR same as addresses in inner encrypted IP HDR?

They are not the same in tunnel mode. The outer addresses are the VPN endpoints (the devices doing the encryption). The inner (encrypted) addresses are the hosts that are communicating -- the host ...
user avatar
  • 62k
0 votes

Is it possible that a router does not support certain encryption methods? (VPN & some websites failing)

Absolutely. Algorithms and hashes are replaced or deprecated to make way for stronger and/or faster variants/types all the time, and device firmware/software is updated to align with that. For ...
user avatar
  • 4,436
0 votes
Accepted

Checkpoint Firewall using wrong Source IP when establishing a VPN

After two sessions with Checkpoint and them creating labs over the Easter weekend to figure out what was going on, they then realised that VPN Link Selection is not supported currently in the VSX ...
user avatar

Top 50 recent answers are included