[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: NAT64 and IPsec support



I never show Alain's presentation first hand but I have heard about
it. As I think others have also commented, this scenario is best
served by tunnels. Use of translation in this case is really
distasteful to me.

Regards
George

On Mon, Mar 31, 2008 at 6:05 AM, Pekka Savola <pekkas@netcore.fi> wrote:
> On Sun, 30 Mar 2008, Yaron Sheffer wrote:
>  > I think we are bundling several different cases together. I will try to
>  > enumerate the use cases, to clarify the situation a bit:
>
>  What about IPsec in Alain Durand's scenario:
>
>  v4-only host == NAT64 === v6-only network ==== NAT64 === v4-only network === v4-only host
>
>  I'm not sure how relevant this scenario is but if this wouldn't work
>  it would mean that instead of double natting you'd have to do some
>  tunneling (which might be for the best from another perspective).
>
>  --
>  Pekka Savola                 "You each name yourselves king, yet the
>  Netcore Oy                    kingdom bleeds."
>  Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
>