re: Issue #68: VPNs with overlapping IP address ranges (was Re: 2401bis issues (possible) resolution)

[Ken Carlberg <K.Carlberg@cs.ucl.ac.uk>]

> I do not think there is any need to negotiate the VPN subscriber ID
> between the parties. The VPN subscriber ID is internal to the SGW, and
> it is not going to trust anything the other end sends.

I would disagree with the above comment.

we developed an incremental VPN capability with one of our gateways
that used a third party manager to add/remove participants from the
VPN, and thus included participant(s) outside of the SGW.  accordingly,
we used and exchanged a VPN subscriber ID to accomplish this.

assuming I haven't misunderstood the basis of the thread on Issue #68, 
the VPN ID feature feature was fundamental in our work and it would be
nice to not see it set aside as an implementation issue.

regards,

-ken