[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: who is right ? (take 2)

To: dbastien@galea.com
Subject: Re: who is right ? (take 2)
From: Stephen Kent <kent@bbn.com>
Date: Mon, 28 Sep 1998 23:27:20 -0400
Cc: ipsec@tis.com
In-Reply-To: <8525668D.005C51E7.00@gotlib.galea.com>
Sender: owner-ipsec@ex.tis.com

Dominique,

Tunnel mode processing calls for discarding any options from the outer
header, upon receipt at the destination, because of security concerns.
Inner header options are not copied to the outer header.  The options in
the figure in the outer header might be statically determined for this SA
or all SAs. This processing restrictioon may change in later editions of
the arch doc, based on some issues that have been raised.

Steve

References:

who is right ? (take 2)

From: dbastien@galea.com

Prev by Date: Re: inbound policy verification
Next by Date: Re: inbound policy verification
Prev by thread: who is right ? (take 2)
Next by thread: RE: who is right ? (take 2)
Index(es):
- Main
- Thread