[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (more#4 fwd from ipsec) Re: Handling of IPcomp in IKEv2



>>>>> "Avram" == Avram Shacham <shacham@shacham.net> writes:

 Avram> Even simpler is to keep existing IPComp implementations
 Avram> unchanged.

Not true.

That's valid if you leave IKE V1 in place.  IKEv2 is different code
(much simpler).  Trying to extract the gnarly IPcomp code within IKEv1
from the larger and even gnarlier IKEv1 body is a lot more work than
implementing the trivial mechanisms that Charlie & al. have proposed.

     paul