design draft issue: existing documents claim

>    IKEv2 assumes that an IKE SA is created implicitly between the IP
>    address pair that is used during the protocol execution when
>    establishing the IKEv2 SA.  This means that, in each host, only one
>    IP address pair is stored for the IKEv2 SA as part of a single IKEv2
>    protocol session, and, for tunnel mode SAs, the hosts places this
>    single pair in the outer IP headers.  Existing documents make no
>    provision to change this pair after an IKE SA is created.


But doesn't NAT-T allow a limited form of changes?

--Jari