Changing to port 4500

Eric Fung <[email protected]> Tue, 29 Aug 2006 15:23:54 -0400
Newsgroups gmane.ietf.mobike
Message-ID <[email protected]>
RFC 4555, Sec. 3.3 says that if both peers support MOBIKE and NAT-T, then they 
must change to port 4500 even if NAT was not detected between them.

But in the design document, RFC 4621, Sec 5.2.3 says that the port change 
should be done immediately after IKE_SA_INIT and before IKE_AUTH. However, 
support for MOBIKE is declared during the IKE_AUTH exchange.

I suppose it's not a big deal, since peers will be listening on port 4500 
anyway. But when should the initiator and responder change ports in the 
scenario where there is no NAT between them?