[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (NAT) Re: Interactions between IPSEC and NAT
bound@zk3.dec.com writes:
> Do we discuss such notions here or do we need to have an Avoidance of
> NAT BOF and eventual Working Group at the L.A. IETF?
>From the proposed NAT WG charter:
The second set of documents will specify NAT friendly application
and protocol design guidelines, interactions between NATs and
applications such as DNS and protocols such as IP sec and mobile
IP. The documents would also be extended to identify areas where
NATs or other protocols and applications can be improved to overcome
the shortcomings in interoperability or functionality. Due to the
importance of the issue, specific attention will be given to the
problems created by NATs for security protocols such as IPsec.
Which makes it sound as if they're planning to be handling such issues.
I know that one of the important points mentioned in the Washington was
that if NAT were going to fly as a WG it would need to work around the
security interactions by modifications to the way we do NAT instead of
modifications to the way we do security.
ben
Follow-Ups:
References: