[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Ipsec] FW: Remaining issues for IKEv2



On Mon, May 17, 2004 at 03:13:25PM +0300, Tero Kivinen wrote:
> Paul Hoffman / VPNC writes:
> > >	Which of the following requirements woudl you be willing to live with?
> > >	(You may select more than one):
> > >
> > >	B)  Method #3 (stateful fragment inspection) is a MUST
> > >	D)  Method #2 is a MAY, Method #3 is a SHOULD
> > >	E)  Method #3 is a SHOULD, May #2 is a MAY
> 
> What is the difference between D and E. Should the E be "Method #2 is
> SHOULD and Method #3 is a MAY"?
> 
> Anyways I can accept method #3 being SHOULD, MAY or even MUST, and
> Method #2 being MAY.
> 
> > 	F)  Method #2 is a MAY, and Method #3 is a MAY
> 
> Which is to say we do not have any preferred method for fragments when
> using port selectors. I would really like to have one method SHOULD
> (and that being method #3).

I concur.  We should recommend (or even mandate) something in this area, I
believe.

Thor

_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec