
|
Option 3 pros and cons Making decisions in the client sensible for mobility cases (+) Simple for VPN gateway (+) If the initiator wants, same address pair used in both directions: this makes it possible to work with stateful filters and NATs (+) Less elegant perhaps (-) |