Re: RE: issue 34 -- ESP vs. IKE based NAT reboot detection

Mohan Parthasarathy wrote:

>Pasi,
>
>Sorry if this was discussed at the meeting. I did not understand a couple of things in this mail
>
>1) You mention implementation complexity. I saw some reference to it in the slides if i am not
>     mistaken. Also, Jari mentioned something in his mail. Is this general "complexity" of MOBIKE ?
>     or something specific to this feature i.e NAT traversal ? Having implemented NAT traversal,
>     i don't know how it can be considered complex considering the complexity of IKEv2 itself :-)
>     So, i am missing something..
>  
>
I guess the main complexity that people were worried about
is that the *ipsec* part needs to detect a changed address
and tell this to the IKE part. This may involve a PFKEY extension,
among other things, and may be hard on a hardware that
does IPsec but does not have this address detection function.

--Jari