RE: IPSP topics

["Wang, Cliff " <CWang@xxxxxxxxxxxxxx>]

Lack of demonstration doesn't equal lack of requiremnets. Can you convince
the group
that if you are to run a VPN service with mutiple vendors's gear and you can
integrate
each vendor's VPN management tools together easily?

-----Original Message-----
From: Angelos D. Keromytis [mailto:angelos@xxxxxxxxxxxxxxxxx]
Sent: Thursday, August 17, 2000 5:03 PM
To: Wang, Cliff 
Cc: 'Abdallah Rayhan'; 'Hilarie Orman'; ipsec-policy@xxxxxxxx
Subject: Re: IPSP topics 



In message
<8E1E94178828D143B34A560A7A6F2C0B2AE89C@xxxxxxxxxxxxxxxxxxxxxxxxxx>,
 "Wang, Cliff " writes:
>A reason to discuss the high level policy layout here is that under a real
>deployment,
>both the high level policy and the low level policy have dependency on each
>other and
>need to work together.

I don't think this has been ever demonstrated; in fact, I know of a lot of
real products (I've seen 3 so far at the USENIX Security Exhibits) that are
totally independent of what's used underneath -- they just translate as
appropriate.
-Angelos