On Fri, Oct 23, 2015 at 11:02 AM, Jay Ashworth <jra at baylink.com> wrote: > We need to do host-mode IPSEC out of AWS to a company in the DC/VA area that > is on L3; AWS apparently will only do network mode IPSEC, and they won't take > that, so we'll need to hop. > 'will only do network mode' .... because the VM you run in aws can't do ipsec to your pix?