0

In an IPsec Secure gateway setup, why is tunnel-mode used when an external laptop wants to access an internal service protected by a firewall? Is tunnel-mode necessary or could transport-mode be used instead? Why can't a gateway perform access-control if it was transport-mode communication?

enter image description here

8
  • 1
    Transport mode retains the original header. This reveals information about the traffic, and can't easily cross NAT. Thus it's simply easier to use tunnel mode with RFC1918 addressing.
    – vidarlo
    Feb 15 at 11:51
  • @vidarlo thanks for answer. but what kind of authentication/access-control is performed?
    – Allexj
    Feb 15 at 14:15
  • 1
    Have you read up on IPSsec on Wikipedia?
    – vidarlo
    Feb 15 at 16:51
  • 1
    Please read the wikipedia page on ipsec or your textbook. Both probably explains the protocol fairly well. If there's unclear details, feel free to ask, but don't ask us to explain the entire protocol for you.
    – vidarlo
    Feb 17 at 10:05
  • 1
    Then ask your professor for a clarification?
    – vidarlo
    Feb 17 at 12:02

0

You must log in to answer this question.

Browse other questions tagged .