Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-28 Thread Pasi.Eronen
Behalf > Of ext Tero Kivinen > Sent: 28 January, 2010 14:18 > To: Eronen Pasi (Nokia-NRC/Helsinki) > Cc: ipsec@ietf.org > Subject: Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, > comments about sections 1-2) > >

Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-28 Thread Tero Kivinen
pasi.ero...@nokia.com writes: > > -- > > 2.11. Address and Port Agility > > > >IKE runs over UDP ports 500 and 4500, and implicitly sets up ESP and > >AH associations for the same IP addresses it runs over. > > --

Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-28 Thread Pasi.Eronen
Tero Kivinen wrote: > > > What kind of things does the RFC require? > > > > Basically, it's assuming that even if you're running IKEv2 over IPv4 > > (and that IPv4 address is NATted), you can still negotiate transport > > mode SAs for IPv6 addresses (which won't get NATted). > > Hmm Let m

Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-26 Thread Tero Kivinen
pasi.ero...@nokia.com writes: > Tero Kivinen wrote: > > > pasi.ero...@nokia.com writes: > > > - Section 2.23.1: If the responder doesn't find SPD entry for > > > transport mode with the modified traffic selectors, and does a lookup > > > with the original selectors, if it finds an entry for transp

Re: [IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-26 Thread Pasi.Eronen
Tero Kivinen wrote: > pasi.ero...@nokia.com writes: > > - Section 2.23.1: If the responder doesn't find SPD entry for > > transport mode with the modified traffic selectors, and does a lookup > > with the original selectors, if it finds an entry for transport mode, > > can it use it? > > I do not

[IPsec] RFC5555 and Section 2.23.1 (was: IKEv2bis, comments about sections 1-2)

2010-01-19 Thread Tero Kivinen
pasi.ero...@nokia.com writes: > - Section 2.23.1: If the responder doesn't find SPD entry for > transport mode with the modified traffic selectors, and does a lookup > with the original selectors, if it finds an entry for transport mode, > can it use it? I do not think it can use the transport mo