Re: New issue 17: Full connectivity

 In your previous mail you wrote:

   Umm... I guess it depends on how IPSec is implemented.
   
   At the originitaing security gateway must know the remote peer IP
  address and uses it as Destination IP address.
   
=> this is what matters.

   On the receiving end, some implementations would only check if the
  destination IP address of the received packet is its local IP
  address.

=> all implementations check if the destination address is local.
If it is not the packet is dropped or forwarded.

   Some implementation might go beyond this and might even look for
  exact match.
   
=> I believe you think to the SA lookup (on the destination, protocol
and SPI triple, or as it is recommended by RFC 2401bis on the SPI only
for unicast. Note the last one is in fact the easier to implement).

   MOBIKE might need to keep both kinds of implementation in mind or make 
   explicit statement on the behaviour it expects from inbound processing.
   
=> we already discussed about this point and the RFC 2401bis was updated
to say any local address should be accepted ad the destination address
of an incoming packet.
   
Regards

[email protected]