[NTLUG:Discuss] Encrypted network traffic on a local network

[Chris Cox]

Leroy Tennison wrote:
> Have been testing ipsec-tools and realized that it is for either 
> host-to-host encryption or an encrypted tunnel between two  networks.  
> Is there a way to have data transmissions between all hosts on a given 
> network encrypted?  To do this with IPSec it appears that you would have 
> to set up host-to-host SAs for every combination of source and 
> destination host.

VPN :)

Each host would have to be on the VPN.

You could make the "normal" network such that hosts can only see
the VPN gateway box and until they VPN in, they can't see
the other hosts on the network.

Of course, lots of overhead doing things this way... but if
performance doesn't matter, it should work (I think).