3 ms·
> IPSec didn't exactly take off Oh, jezus. Did you read it on the Internets? IPsec (s is in lowercase) is the standard to securing L2 connectivity and it has
by abcd_f 13y ago
> IPSec didn't exactly take off
Oh, jezus. Did you read it on the Internets?
IPsec (s is in lowercase) is the standard to securing L2 connectivity and it has been ubiquitously used for site-to-site and client-to-site connectivity for ages. In addition to several mature FOSS implementations, every network equipment vendor ships one. There is also a ton of client software - Windows supported it since Windows 2000, the SSH company (you know, the ssh creators) has been selling an IPsec Toolkit since as early as 1999, Cisco has a VPN client that is de-facto software in Cisco-based shops for remote workers, etc.
- gonzo 13y agoIPsec, which runs at layer 3, secures IP (layer 3) traffic. To protect L2 connectivity with IPsec, you'll need to tunnel the l2 frames inside IP.
- drdaeman 13y agoYou're right. And he's right too. Standalone IPsec is supposedly nearly non-existent, but there's a plenty of L2TP/IPsec traffic out there.
- acdha 13y ago> > IPSec didn't exactly take off > IPsec (s is in lowercase) is the standard to securing L2 connectivity and it has been ubiquitously used for site-to-site and client-to-site connectivity for ages The question wasn't whether the standard exists but whether it's widely used. Your claims don't sound plausible to me as I've yet to work on a network (corporate, .edu, .gov) where IPSec is used – everyone focused on protocol level security like SSH or SSL instead.