<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6603.0"> <TITLE>IPSec Questions </TITLE> </HEAD> <BODY>  I am trying to deploy IPSec VPN using a RH4 box as the gateway and router. This is not the configuration in the RH4 System Admin or Security Guide but is closer to the configuration in the IPSec Howto Guilde. Red WKS ---> Red VPN NIC , Black VPN NIC ---> Black Network ----> Black VPN NIC , Red VPN Nic ---> Red WKS The Red and Black VPN NIC are on the same physical box. The Red Network is in the 172.x.x.x. and the black is in the 192.x.x.x. So far that any configuration I try either fails or by-passes the tunnel. Here are my questions: 1. In setkey, if I have not used the -m tunnel on the add command but do use esp/tunnel/IP1-IP2//require on the spdadd, is the Ipsec running is tunnel or esp mode ? 2. When I examine the Black VPN NIC with either ethereal or tcpdump, I see the red IP address, but I am not sure how is it going thru the router. (Linksys 8 port for testing purposes set with the black network). Is Ethereal and TCPdump grabbing the data before it goes into the tunnel ? Harry ------------------------------------------------------------- Harry E Smith Jr. Senior Staff System Engineering (408) 473 6491 (work) (877) 635 1529 (pager) </BODY> </HTML>