Non-standard VPN protocols (cont) cIPe - Crypto IP Encapsulation UDP transport pkcipe daemon listens on TCP for key exchange Requires kernel module Supports PSK or pubkey authentication cIPe version 3 supports IP only cIPe version 4 supports IP or Ethernet only Good support for dynamic IP addresses Windows port exists