Panwei (William) <william.pan...@huawei.com> wrote: > If you want to do the traceroute to determine how far ESP actually > gets, you need to make sure every node supports the ESPping.
No, only the final machine. Others would respond with ICMP unreachable when TTL=0 -- Michael Richardson <mcr+i...@sandelman.ca>, Sandelman Software Works -= IPv6 IoT consulting =- *I*LIKE*TRAINS*
signature.asc
Description: PGP signature
_______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec