Re: issue 11 -- window size

Tero Kivinen wrote:

>Mohan Parthasarathy writes:
>  
>
>>If there are several paths and some of them contains
>>NAT, i am assuming that Tero's proposal can detect
>>them (inspite of the constraint that the retransmitted
>>message cannot be modified). If this is getting into
>>too much detail, i will wait :-)
>>    
>>
>
>Yes, the initiator can detect NAT, as the responder will not try any
>other addresses, i.e. it always replies back to the address where
>addresess are reversed.
>
>This simply requires that we want to have option to turn NAT-T on /
>off as a separate notify, as requested by initiator after detecting
>NAT (and after consulting policy etc). 
>  
>
Ok. And doing this separately works, because the IKEv2
messages will always go through NATs and because the
peer responds back to the same address/port combination,
right? Its only the ESP traffic for which the specific NAT
support needs to be turned on.

--Jari