Re: Issue: Support for IPv4 - IPv6 movements (#13)
Stephen Kent <[email protected]>
| Newsgroups | gmane.ietf.mobike |
|---|---|
| Message-ID | <p06110400bd01d699ef53@[128.89.89.75]> |
At 12:37 AM +0200 6/25/04, Francis Dupont wrote: > In your previous mail you wrote: > > 2401bis already mandates support for selector sets that allow a > single SA to refer to a set of IP addresses and ports, > >=> argh! The term "ports" here disturbs me: we are talking about >the support of multiple simultaneous *outer* addresses (not >traffic selectors aka inner addresses) in the SADB. You are right; ports are irrelevant in this context. Sorry for the confusion. The SCTP requirement is to map sets of S/D addresses to a single SA via the SPD, which we do. The RFC also calls for mapping traffic from a set of destination addresses to a single SA, via the SAD. This is something that 2401bis accommodates, in the discussion of inbound traffic processing in Section 5.2, step 2, so long as we interpret the phrase "If the packet appears to be IPsec protected and it is addressed to this device" as allowing multiple addresses for the IPsec device. We will add a note to clarify this. Steve _______________________________________________ Mobike mailing list [email protected] https://www.machshav.com/mailman/listinfo.cgi/mobike