Re: I-D on SAFENeT

inline
----- Original Message ----- 
From: "Townsend, Richard L, JR (Rick)" <[email protected]>
<snip>
> I did go back and check on my reference for the MIDCOM agent
> being in the external realm and found it in RFC 3303.  The
> alternative for putting the agent in a private environment
> is not mentioned.
>

Figure 2 on page 12 of RFC 3303 illustrates a MIDCOM agent residing in the
private realm. It also says (on page 11) referring to Figure 2:

   In the illustration below, the proxies and the MIDCOM PDP
   are shown inside a private domain.  The intent however,
   is not to imply that they be inside the private boundary
   alone.  The proxies may also reside external to the domain.
   The only requirement is that there be a trust relationship
   with the middlebox.

The architecture described for SAFENet sounds like an RFC 3303 MIDCOM
architecture to me too.

cheers,
(-:bob

Robert F. Penfield
Chief Software Architect
Acme Packet, Inc.
71 Third Avenue
Burlington, MA 01803
[email protected]