[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
A question on IPsec AH in IPv6
In RFC 2402, section 3.1, there is discussion about the placement
of the AH header with respect to IPv6 extension headers:
"In the IPv6 context, AH is viewed as an end-to-end payload, and thus
should appear after hop-by-hop, routing, and fragmentation extension
headers. The destination options extension header(s) could appear
either before or after the AH header depending on the semantics
desired."
I was trying to figure out what the ramifications are
with the destination options headers being before or after
the AH header. Is anyone aware of any specific requirement
for the destination options to be AFTER the AH header?
(Since AH doen't render the extension headers opaque, it
would seem that other nodes could always process the dest.
options, regardless of where they fall.)
Bob Doud
Follow-Ups: