Re: New issue 16: No packets from other end?
Vijay Devarapalli <[email protected]>
| Newsgroups | gmane.ietf.mobike |
|---|---|
| Message-ID | <[email protected]> |
Michael Richardson wrote: > >>>>>>"James" == James Kempf <[email protected]> writes: > > James> With TCP, the session is bound to the IP address, so if the > James> address fails, then the session must be terminated, by the > James> TCP semantics. Having MOBIKE try to change this would require > James> some kind of cross-layer violation to tell TCP to change. > > Typically, in RW scenarioes, an IP address is "extruded" through the > IPsec tunnel, and is bound to a virtual address on the end host. > Think of this as being like MobileIP's Home-Address. > > So, if you fix the tunnel, then the stuff inside continues unchanged. MOBIKE should be used to fix the tunnel, but, in IMHO, MOBIKE shouldnt decide when to fix the tunnel or what address to use to fix the tunnel. the IP stack (which might include MIP6/DNA) should tell the MOBIKE protocol what IP address to use to fix the tunnel. Vijay > > - -- > ] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [ > ] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[ > ] [email protected] http://www.sandelman.ottawa.on.ca/mcr/ |device driver[ > ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.2 (GNU/Linux) > Comment: Finger me for keys > > iQCVAwUBQWsd8YqHRg3pndX9AQFFHwP9FNTJm2SMiEdqNNe2bpWPzK8nDNbJeLYQ > 7qkEUBGYhngtSqmyFqBxnYvPWfOZWntMtATreEazF5PJuSlaLOVXT3YPXYPf9ht+ > 4V608AAQ90Ye92n2MlR/bsP93H4bWNASlJE3HJADp7+shSzDg0UiRlQULfMG6yGs > W1tK8ngZs38= > =atzH > -----END PGP SIGNATURE----- > _______________________________________________ > Mobike mailing list > [email protected] > https://www.machshav.com/mailman/listinfo.cgi/mobike