[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: ECN and IPsec tunnels



>  I would suggest that or'ing the outer ECN bits with the inner ECN
> bits on tunnel egress is the thing to do. This is something that should be
> negotiated as an SA attribute by IKE.

That is exactly what the draft proposes (only one ECN
bit is involved), including support
for negotiating this as an SA attribute negotiation and
the related SAD modification (both of the latter are
OPTIONAL for obvious reasons).

Was some of this not clear from the draft
when you read it?

--David

---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 435-1000 x75140, FAX: +1 (508) 497-6909
black_david@emc.com
---------------------------------------------------