[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: peer address protection and NAT Traversal

To: <Francis.Dupont@xxxxxxxxxxxxxxxx>
Subject: RE: peer address protection and NAT Traversal
From: "Jayant Shukla" <jshukla@xxxxxxxxxxx>
Date: Mon, 13 Jan 2003 09:19:16 -0800
Cc: <Charlie_Kaufman@xxxxxxxxxxxxxxxx>, <ipsec@xxxxxxxxxxxxxxxxx>, <owner-ipsec@xxxxxxxxxxxxxxxxx>
Importance: Normal
In-reply-to: <>
Sender: owner-ipsec@xxxxxxxxxxxxxxxxx


> -----Original Message-----
> From: Francis.Dupont@xxxxxxxxxxxxxxxx [mailto:Francis.Dupont@enst-
> 
> => three-way handshake == return routability check, i.e., you check
the
> peer can receive packets to its claimed address?
> 

Yes, that is how we do it. To recover from floated NAT entries, we use a
mechanism where the receiver can signal the sender to re-initiate the
three-way handshake. You need the ability to request the three-way
handshake in case there are multiple clients behind the same NAT.

Regards,
Jayant
www.trlokom.com

References:
- Re: peer address protection and NAT Traversal
  - From: Francis Dupont

Prev by Date: Re: Proposed Configuration payload for IKEv2
Next by Date: RE: peer address protection and NAT Traversal
Previous by thread: Re: peer address protection and NAT Traversal
Next by thread: Re: peer address protection and NAT Traversal
Index(es):
- Date
- Thread