[Info-vax] "Linux Shminux - IPsec is Snake Oil!" VMS Mgmnt

[Steven Underwood]

<peut at peut.org> wrote in message 
news:2351d6bb-2098-4f42-b2f9-3929df9862d3 at a7g2000yqk.googlegroups.com...
> As I understand it, IPsec is supposed to be integral part of IPv6.
> The discussion if you really need all that is moot, there will come a
> moment
> in time you will have to have it.

OK, Do you have any plans to move to IPv6?  I know we are currently planning 
to add another office to our AD domain and as such are going to be redoing 
their IP range.  There is no plan to do this to IPv6 standards.  We will be 
using IPv4 10.x.x.x ranges.  My Vista laptop has an IPv6 address but none of 
my other network equipment does.

At my last position, when I started, they had all machines configured with 
public IP's.  With all the security built into IPv6, is it going to be 
accepted that it is now safe to do that again?  I highly doubt it... that 
security model is difficult to explain to the PHB's of the world and 
difficult to manage/control.  A firewall is fairly easy to explain.

Back to the VMS specific issues... Something I have been wondering... since 
IPsec is supposed to be an integral part of IPv6, is it already implemented 
on IPv6, even if not annunciated on the roadmap (that started this 
discussion) so people who need IPsec can simply convert to IPv6 and be 
covered?