[16853] in cryptography@c2.net mail archive
Re: link-layer encryptors for Ethernet?
daemon@ATHENA.MIT.EDU (james hughes)
Wed Feb 9 10:13:39 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
In-Reply-To: <20050209003609.89F023C0125@berkshire.machshav.com>
Cc: james hughes <hughejp@mac.com>,
Russell Nelson <nelson@crynwr.com>,
Cryptography <cryptography@metzdowd.com>
From: james hughes <hughejp@mac.com>
Date: Wed, 9 Feb 2005 08:16:18 -0500
To: "Steven M. Bellovin" <smb@cs.columbia.edu>
This is not _just_ an IPsec box. They also have a protocol that =20
predates IPsec. This was presented to the "then forming" IPsec group in =20=
1994 but it was passed over.
=46rom the admin guide at:
http://blueridgenetworks.com/support/pdf/=20
VPNRemote%20AccessAdminGuide.pdf
> Blue Ridge VPN uses a recognized approach to network connectivity =20
> called Layer 2 Tunneling. This general technique
> is used by sophisticated network switching gear such as VLAN products =20=
> and Layer 2 switches to make one physical
> =93Ethernet=94 logically appear to be composed of desktops, servers, =
and =20
> office LAN=92s that may physically be in separate
> locations.
I believe they do use protocol 50 (even though they are not IPSEC).
On Feb 8, 2005, at 7:36 PM, Steven M. Bellovin wrote:
> In message <efb104146cd912c1b7164652b55c5ff8@mac.com>, james hughes =20=
> writes:
>> The following device is a layer 2 tunneling device that has 256 bit =20=
>> AES
>> at up to 400Mb/s.
>>
>> http://blueridgenetworks.com/products/index.htm
>> =
http://blueridgenetworks.com/support/borderguard_vpn__serv_res_ctr.htm
>>
>
> Layer 2? It seems to be an IPsec box. At the least, their
> Administrator's Guide talks about using IP Protocol 50.
>
> --Prof. Steven M. Bellovin, =
http://www.cs.columbia.edu/~smb
>
>
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
