icos-2----Page:11
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18 

Internet Layer Reliance
If both lower and higher layer dependencies are undesirable, then IP configuration (security) needs to depend on the Internet layer.
During boot, some Internet layer facilities may not be available
IP fragmentation and reassembly not reliable when sending from the unspecified address
IPsec requires an IP address
Implications
IPsec typically used only after address assignment or for relay-server security
Payloads no larger than MTU; may need to build-in fragmentation support to handle certificate payloads

PPT Version