Re: IKEv2: prepending four octets

[Vinay K Nallamothu <vinay-rc@naturesoft.net>]

On Wed, 2003-03-19 at 10:35, ravi wrote:
> IKEv2 is being defined fresh. Why can't we use port 500 for the purpose of
>       NAT Traversal. If we make this packet also containing first four bytes after
>       UDP header as 0s in case of IKE packet, then there is no need for port 4500
This is to avoid any IKE aware NAPT devices present in between playing
smart. These devices make use of the SPI field to uniquely identify the
source behind the NAPT.

For more details please go through  sections 9.1 to 9.3 of
draft-ietf-ipsec-ikev2-tutorial-01.txt.

Hope this helps
vinay

> 
> --Ravi
> 
> >Hope this helps
> >
> >Yoav
> >
> >-----Original Message-----
> >From: owner-ipsec@lists.tislabs.com
> >[mailto:owner-ipsec@lists.tislabs.com]On Behalf Of ravi
> >Sent: Tuesday, March 18, 2003 10:11 AM
> >To: ipsec@lists.tislabs.com
> >Subject: IKEv2: prepending four octets
> >
> >
> >Dear All,
> >I am going through the ikev2-0.5 draft.It says
> >In the IKE header when sent on UDP port 4500 ,IKE messages have
> >prepended four octets of Zero.
> >
> >My doubt is what made to prepend four octets of Zeroes before the IKE
> >message.
> >Thanks in advance,
> >Ravi Kumar CH.
> >
> >
> >
> >  
> >
> 
> 
>