
|
NAT Issues (2/2) Send keepalives on every alternative path or just on the primary path (implications: if only on the current path, only the node that is behind a NAT can recover from problems) Should we support these scenarios: Initiator movement from a not-NAT to a NAT and Initiator movement from a NAT to a non-NAT Suggestion: Support them. Do we allow Responders to be behind NATs (not NAPT)? Suggestion: Follow approach of IKEv2 an allow Responder to be behind a NAT. |