[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ESP/AH


On Wednesday, Dec 4, 2002, at 09:32 America/Montreal, J. Noel Chiappa wrote:
From: Iljitsch van Beijnum <iljitsch@muada.com>
The problem with NAT is not that the addresses in the IP header are
changed.
Well, that is a problem (e.g. with IPSec), but you're right, it's more of an
engineering problem than an architectural one.
ESP/AH do that *only* because another more suitable identifier did not
exist in the Internet Architecture.  If we could add such an identifier
to the architecture, the logical thing would be to update ESP/AH to use
that identifier (instead of using addresses) in an ESP/AH Security
Association.

Ran
rja@extremenetworks.com