Re: SOI QUESTION: 6.2 Port number

[Henry Spencer <henry@spsystems.net>]

On Thu, 11 Jul 2002, Theodore Ts'o wrote:
> 6.2.A) Should SOI use the same port as IKEv1?

Desirable if the details permit software that is aware of SOI to easily
tell the two protocols apart, e.g. version number in the same place or
some other explicitly-defined, reliable strategy for distinguishing the two. 

Otherwise undesirable.  Different protocols should have different ports.

The "avoid timeout" argument in soi-features-01 assumes that the other end
sends some sort of "huh?" reply on receiving stuff it doesn't understand.
Some IKE implementations just log and discard, so a timeout is still needed.

I would add:  the SOI port should be solely for SOI (and possibly its
ancestors/descendants).  It should be off limits to other random protocols,
e.g. NAT traversal.

                                                          Henry Spencer
                                                       henry@spsystems.net