BOUNCE v6ops@ops.ietf.org: Non-member submission from [Michael Richardson <mcr@sandelman.ottawa.on.ca>] (fwd)

[Kurtis Lindqvist <kurtis@kurtis.pp.se>]

From mcr@marajade.sandelman.ca Wed Apr 02 02:35:40 2008
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
To: Pekka Savola <pekkas@netcore.fi>
cc: Yaron Sheffer <yaronf@checkpoint.com>,
    marcelo bagnulo <marcelo@it.uc3m.es>,
    Iljitsch van Beijnum <iljitsch@muada.com>,
    George Tsirtsis <tsirtsis@googlemail.com>,
    IPv6 Operations <v6ops@ops.ietf.org>, narten@us.ibm.com,
    dthaler@microsoft.com
Subject: Re: NAT64 and IPsec support
In-Reply-To: <alpine.LRH.1.10.0803310902180.11947@netcore.fi>
References: <47ED4397.10108@it.uc3m.es> <5DF0C845-324F-41F8-838C-D92414D8AE7F@muada.com> <d3886a520803290314u49faf7cex440cfa44c24516c9@mail.gmail.com> <47EE191D.4040806@it.uc3m.es> <7A333CA9-EF6F-4D70-B854-A25E0FECBA08@muada.com> <47EE7279.50109@it.uc3m.es> <47EF3683.3030200@checkpoint.com>  <alpine.LRH.1.10.0803310902180.11947@netcore.fi>
Date: Tue, 01 Apr 2008 20:57:22 -0400
Message-ID: <11316.1207097842@marajade.sandelman.ca>


> > > > > "Pekka" == Pekka Savola <pekkas@netcore.fi> writes:
    Pekka> On Sun, 30 Mar 2008, Yaron Sheffer wrote:
    >> I think we are bundling several different cases together. I will try to
    >> enumerate the use cases, to clarify the situation a bit:

    Pekka> What about IPsec in Alain Durand's scenario:

    Pekka> v4-only host == NAT64 === v6-only network ==== NAT64 === v4-only network === v4-only host

  That just looks like multiple layers of NATv4 to IPsec.
  that's the whole point of v4v6v4, right?

--
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [