Re: [sunset4] [IPsec] ietf-nat64 - Internet VPN clients

2016-12-09 Thread Tommy Pauly
to provide that? > > > > Original message ---- > From: Tommy Pauly mailto:tpa...@apple.com>> > Date: 09/12/2016 17:32 (GMT+00:00) > To: "Heatley, Nick" mailto:nick.heat...@ee.co.uk>> > Cc: "Bjoern A. Zeeb" <mailto:bzee

Re: [sunset4] [IPsec] ietf-nat64 - Internet VPN clients

2016-12-09 Thread Tommy Pauly
> On Dec 9, 2016, at 1:43 PM, Michael Richardson wrote: > > > Yoav Nir wrote: >> To get this working, the DNS64 should be on the remote tunnel endpoint >> or behind it. And this will require that it has an IPv6 address and >> knows to do the NAT64 translation in cooperation with the tunnel >>

Re: [sunset4] [IPsec] ietf-nat64 - Internet VPN clients

2016-12-09 Thread Tommy Pauly
just a change that needs to be made on the client behind the NAT64, and requires no protocol changes in IKE or knowledge on the server side. Thanks, Tommy Pauly > On Dec 9, 2016, at 9:03 AM, Heatley, Nick wrote: > > It is just the single NAT64 that is in question (I also tend to