Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-26 Thread Michael Richardson
Stephen == Stephen Hanna sha...@juniper.net writes: Stephen I think that Michael is asking an important question. There Stephen are many ways to solve the P2P VPN problem. One way is to Stephen have satellites with little configuration that connect to Stephen core gateways with

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-26 Thread Michael Richardson
{fat fingers let previous email got away too soon, ignore} Stephen == Stephen Hanna sha...@juniper.net writes: Stephen I think that Michael is asking an important question. There Stephen are many ways to solve the P2P VPN problem. One way is to Stephen have satellites with little

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-26 Thread Yoav Nir
On Mar 26, 2012, at 10:47 AM, Michael Richardson wrote: Yaron == Yaron Sheffer yaronf.i...@gmail.com writes: Yaron I don't want to speak for MCR, but I think you are taking his Yaron question too far towards the implementation aspects. What I Yaron read in the question is, do we

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-26 Thread Michael Richardson
Yoav == Yoav Nir y...@checkpoint.com writes: You didn't take my comments too far; I think you realized that I was in fact saying two things: 1) when traffic is redirected, MUST it be redirected directly to the real endpoint? (There might be issues of in-band double NAT

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-21 Thread Stephen Hanna
Of Vishwas Manral Sent: Wednesday, March 21, 2012 3:18 PM To: Stephen Hanna Cc: IPsecme WG Subject: Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway? Hi Steve, This is unclear to me. Isn't it routing that we send a packet across

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-21 Thread Yoav Nir
Of Vishwas Manral Sent: Wednesday, March 21, 2012 3:18 PM To: Stephen Hanna Cc: IPsecme WG Subject: Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway? Hi Steve, This is unclear to me. Isn't it routing that we send a packet across

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-21 Thread Yaron Sheffer
21, 2012 3:18 PM *To:*Stephen Hanna *Cc:*IPsecme WG *Subject:*Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway? Hi Steve, This is unclear to me. Isn't it routing that we send a packet across to a closer gateway/ router? What does

Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-21 Thread Stephen Hanna
Subject: Re: [IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway? Hi Steve, Yoav, I don't want to speak for MCR, but I think you are taking his question too far towards the implementation aspects. What I read in the question is, do

[IPsec] [ipsecme] #214: Should gateways figure things out completely or just punt endpoints to a closer gateway?

2012-03-20 Thread Stephen Hanna
Please comment on Suggested Resolution. Note that Yaron has already supplied his comment below. Steve -Original Message- From: ipsecme issue tracker [mailto:t...@tools.ietf.org] Sent: Tuesday, March 20, 2012 6:59 PM To: yaronf.i...@gmail.com;