Re: [BEHAVE] [v6ops] protocols without need for ALG ?

[Toerless Eckert <[e-mail]>]

Thanks, Owen

Wrt directionality: I was just wondering about embedded addresses or other
difficult stuff. I was assuming 1:1 stateless v4<->v6 NAT, aka:  "directionality"
should not be an issue... Right ?

Thanks for the other protocol list.

Cheers
    Toerless

On Thu, Jul 30, 2015 at 02:07:23PM -0700, Owen DeLong wrote:
> FTP should be long deprecated for the most part anyway, however, PASV
> mode FTP (if you must use FTP) should be OK without need of an ALG.
> 
> >   traceroute - ??  (initiated from v4 NOC) ??
> >   telnet  - OK 
> >   ping    - OK ?
> 
> Should generally be OK. Requests must come from translated side of
> the host pair. Responses can come from either side, but to be meaningful,
> need to be responding from native side to translated side.
> 
> >   SSH/SCP - OK
> >   syslog  - OK
> >   TFTP    - OK ?
> 
> Should be OK, depending on which side is client. (client has to be the
> private address/translated side of the connection).
> 
> >   radius  - OK ? (i ran some tests, seemed to be fine)
> >   diameter/tacacs+ - OK ?
> 
> Should be OK, again, assuming favorable directionality.
> 
> If RADIUS/TACACS server is on translated side and router is on native side,
> then this will not work without an ALG or some other hackery.
> 
> >   NTP     - OK ???
> 
> Same directionality considerations apply here.
> 
> >   For the following, that have extensible data-models (MIBs/OIDs, XML schema etc.),
> >   i can see that some NOC tools relying on them might not support data-models
> >   with IPv6, but that would be "fine" (aka: can't manage everything from such tools,
> >   but transport stack works):
> > 
> >   netconf - OK ?
> >   SNMP    - OK ?
> 
> Should be OK, assuming favorable directionality.
> 
> HTTP
> HTTPs
> SMTP
> IMAP
> 
> sFlow/cFlow/etc.
> 
> Owen