Shorewall users - Aug 2013 - ipsec transport mode

Having  qos issues with openvpn so I''m going to test ipsec.

I''m thinking of running ipsec transport mode between the shorewall
routers at each site.

Then thinking of running a gre tunnels between sites.
No ipsec tunnels or nat.

Is there a proper shorewall way to enable ipsec on the external network
interfaces?

John

------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk

I''m thinking of running ipsec transport mode between the shorewall
routers
at each site.

Then thinking of running a gre tunnels between sites.
No ipsec tunnels or nat.

Is there a proper shorewall way to enable ipsec on the external network
interfaces?

http://www.shorewall.net/IPSEC-2.6.html

-Tom


------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk