Re: Path MTU Discovery

Ran Atkinson <rja@inet.org> Sat, 08 February 1997 09:06 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id EAA24570 for ipsec-outgoing; Sat, 8 Feb 1997 04:06:20 -0500 (EST)
Date: Sat, 08 Feb 1997 02:56:12 +0000
From: Ran Atkinson <rja@inet.org>
Subject: Re: Path MTU Discovery
To: "Angelos D. Keromytis" <angelos@aurora.cis.upenn.edu>, Dan McDonald <Dan.McDonald@Eng.sun.com>
Cc: ipsec@tis.com
X-Mailer: Chameleon ATX 6.0, Standards Based IntraNet Solutions, NetManage Inc.
X-Priority: 3 (Normal)
References: <199702070727.XAA24969@kebe.eng.sun.com>
Message-ID: <Chameleon.855370677.rja@c8-a.snvl1.sfba.home.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

Dan McD is correct (and the RFC-1827 ESP spec has a bug).

Fragmentation processing occurs _after_ all outbound IPsec processing
and _before_ all inbound IPsec processing.  This should be for ESP
as well as for AH.

Ideally this will get corrected in the new ESP spec.

Mea Culpa.

Ran
rja@inet.org