NAT traversal and refreshes

[David Wierbowski <wierbows@us.ibm.com>]

I have a question about the "Negotiation of NAT-Traversal in IKE" draft.
Should the NAT vendor ID, NAT-D payloads, and NAT-OA payloads documented in
draft-ietf-ipsec-nat-t-ike-07 be exchanged during refreshes of a phase 1
and phase 2 SAs or should they only be exchanged in the initial negotiation
of a phase 1/2 SA?  It seems as if once you've detected a NAT in the
initial negotiation there's not much value in checking if it is still there
on a refresh. Thanks in advance for your help.

Dave Wierbowski

z/OS Comm Server Development