Re: Mobile IP and Mobike
"James Kempf" <[email protected]>
| Newsgroups | gmane.ietf.mobike |
|---|---|
| Message-ID | <[email protected]> |
Tero,
> That is not following the IKEv1/IKEv2 RFCs nor the architecture draft.
> There tunnel mode SAs are tied to the IP addresses which are used to
> when it is negotiated in the IKE. It is not very clean solution that
> Mobile IP goes and modifies the internal databases of the IPsec module
> (SAD). If you want to use standard IPsec then you need to renegotiate
> the IPsec and IKE SAs before sending the binding update.
Right, this is exactly the point I was trying to get to. But it would
lengthen the binding update time.
jak