[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: I-D ACTION:draft-ietf-ipsec-udp-encaps-00.txt



(More whining).  If a link is idle for more than 30 seconds, all it takes is
for one NAT-keepalive packet to get dropped (or corrupted) between the
system inside the NAT and the NAT device for problems to arise.  There
currently isn't any recovery mechanism for this situation.  The next
NAT-keepalive sent by the system is likely to create a new NAT mapping using
a different port (and/or address).

-dave