[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

v6ops-nat64-pb-statement-req: IPsec requirement



draft-ietf-v6ops-nat64-pb-statement-req-00.txt says:

>    R11: IPsec support.
> 
>    The translator MUST support communication between IPv4 node and IPv6
>    node using UDP Encapsulation of IPsec ESP Packets as defined in
>    [RFC3948] as applicable.  RFC3948 should be interpreted as with the
>    IPv6 side on the IPv6-IPv4 translator being the IPv4 private side of
>    the conventional NAT.  IPsec support MAY require updating also the
>    IPv4 side.


Actually, I think the real requirement is that both IPsec and IKEv2
work. IPsec without key management is pretty useless in practice. Is
that what is meant?

Thomas