[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IKE negotiation/rekeying problem with RSIP
"Tero Kivinen" <kivinen@ssh.fi> wrote:
> No, the DOI document is very clear that there is only two possible
> port numbers for ID payload, any (== zero), or 500. If you use port
> ANY (== zero), then you may also use any port you want.
cool. thanks for clearing that up. how common (beyond the testing
sites) is this capability of using other-than-port-500 in commercial
ipsec implementations?
this would mean that it is quite
possible to allow different rsip clients behind an rsip server
to register each their own ike listener at their own port number
and so enable ike sessions to be initiated from the outside to an
inside rsip client. how the outside host learns about the
particular port number to use for any given rsip client is another
matter. srv rr's? out of band?
tnx,
-gabriel
Follow-Ups:
References: