RE: NAT Traversal

[Srinivasa Addepalli <[e-mail]>]

On Mon, 4 Mar 2002, Chinna N.R. Pellacuru wrote:

> On Mon, 4 Mar 2002, Srinivasa Addepalli wrote:
> >   Also think of Manual Key Managed IPSEC policies. SPIs are manually
> >   configured.
> >
> 
> And, why can't manually configured SPIs follow the new semantics?
> 
>     chinna

Both IKE and manual key management exist on the same 
device. Typically, to make the management and configuration easy,
devices restrict the SPIs to be in some range for MKM policies, so
that there will not be any conflict on SPIs chosen for IKE based
SPD policies and MKM based SPD policies. Though this is not
a strong argument, it might make configuration difficult.
> 

-- 
Srinivasa Rao Addepalli
Intoto Inc.
3160, De La Cruz Blvd #100
Santa Clara, CA
USA
Ph: 408-844-0480 x317