mobike-1----Page:28
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
|
Issue #19: Same or different addresses for IPsec SA pairs Should the IPsec traffic in both directions should use the same pair of addresses? Discussion: With the ‘initiator decides approach’ the initiator can decide to use different pairs of addresses. In most cases the same address pair will be used. Problems with NATs and stateful packet filter firewalls Proposal: Always the same pair of addresses Future extension can change it. |