ipsec as ipso alternative

[Ilmar S. Habibulin]

I was browsing through RFC 2401 trying to figure out how to use them in
multilabel distributed environment. And i came to conclusion, that in
order to communicate packets of equal label subjects must have the same
security association. So there is no label in packet in any form.
Am i correct or i misunderstand rfc?

If i'm correct, then that is cool and provide the way of communication
between different, even non-MLS systems.



To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message