> > Without ever having looked at this I would guess that openbgpd support
> > for dynamic keying is for securing the bgp session itself, nothing more.
> >
>
> Yes, this is correct.

*sigh*. There goes hopes for elegant BGP-IPsec VPNs, back to BGP over
GRE over IPsec.

Thanks Claudio, Tony for clearing this out,

Florian

Reply via email to