Re: OpenBGPd with dynamic keying (ipsec ike support)

2006-03-10 Thread tony sarendal
On 09/03/06, Florian Daniel Otel [EMAIL PROTECTED] wrote: Hello all, I have the following question (== misunderstanding from my part?) w.r.t. openbgp support for dynamic keying: I was living under the impression (hope?) that the said support means not only that the keys for the BGP peering

Re: OpenBGPd with dynamic keying (ipsec ike support)

2006-03-10 Thread Claudio Jeker
On Fri, Mar 10, 2006 at 09:36:07AM +, tony sarendal wrote: On 09/03/06, Florian Daniel Otel [EMAIL PROTECTED] wrote: Hello all, I have the following question (== misunderstanding from my part?) w.r.t. openbgp support for dynamic keying: I was living under the impression (hope?)

Re: OpenBGPd with dynamic keying (ipsec ike support)

2006-03-10 Thread Florian Daniel Otel
Without ever having looked at this I would guess that openbgpd support for dynamic keying is for securing the bgp session itself, nothing more. Yes, this is correct. *sigh*. There goes hopes for elegant BGP-IPsec VPNs, back to BGP over GRE over IPsec. Thanks Claudio, Tony for clearing

OpenBGPd with dynamic keying (ipsec ike support)

2006-03-09 Thread Florian Daniel Otel
Hello all, I have the following question (== misunderstanding from my part?) w.r.t. openbgp support for dynamic keying: I was living under the impression (hope?) that the said support means not only that the keys for the BGP peering session per se are established dynamically but also that the SPD