Re: ipsra requirements

["Bernard Aboba" <aboba@xxxxxxxxxxxxx>]

> 1) multicast through tunnel?
> 
> I think William Dixon brought this up, saying that remote users need to
> be able to receive multicasts as though they are on the local net. Is
> this a requirement?

Yes, it is. But this is just an implementation issue for IPSEC tunnel
mode, isn't it?

> 
> 2) keepalive/pulse for accounting?
> 
> I think William also brought this up, but it has been brought up by many
> others. I think it is a requirement. What do others think?
> 

Yes, I think it is a requirement. If you don't know when people log off,
it is very hard to do auditing and billback. It will also make it very 
difficult to know if people are logged on simultaneously from
disparate locations, which could be a sign that someone's
password has been compromised.