Re: New issue 16: No packets from other end?

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "James" == James Kempf <[email protected]> writes:
    James> With TCP, the session is bound to the IP address, so if the
    James> address fails, then the session must be terminated, by the
    James> TCP semantics. Having MOBIKE try to change this would require
    James> some kind of cross-layer violation to tell TCP to change.
  
  Typically, in RW scenarioes, an IP address is "extruded" through the
IPsec tunnel, and is bound to a virtual address on the end host.
  Think of this as being like MobileIP's Home-Address.

  So, if you fix the tunnel, then the stuff inside continues unchanged.

- --
]     "Elmo went to the wrong fundraiser" - The Simpson         |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] [email protected]      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQWsd8YqHRg3pndX9AQFFHwP9FNTJm2SMiEdqNNe2bpWPzK8nDNbJeLYQ
7qkEUBGYhngtSqmyFqBxnYvPWfOZWntMtATreEazF5PJuSlaLOVXT3YPXYPf9ht+
4V608AAQ90Ye92n2MlR/bsP93H4bWNASlJE3HJADp7+shSzDg0UiRlQULfMG6yGs
W1tK8ngZs38=
=atzH
-----END PGP SIGNATURE-----