IPSec Routing

[jhall at socket.net]

>If you were using tunnel mode, the encrypted packet would change its
>source and destination IP's, specifying your gateway as the source, and
>your vendor's gateway as the destination, so intervening routers would
>have no difficulty delivering the packet, or routing reply packets back
>to you.

This may be where my misunderstanding is coming from.  Our vendor has not 
specified an internal IP address for the other end of the tunnel.  They 
have given me an address to ping once the connection is up and running 
though. 

Is it possible to using tunneling mode without an internal IP address on 
the other gateway?  My understanding of the protocol is that this is not 
possible. 

Thank you for your help.


Jay