Re: [IPsec] IETFLC comments for draft-ietf-ipsecme-ikev2bis-08

An initiator can use port 4500 for both IKE packets even while sending IKE_SA_INIT request.
I think responder can also use port 4500 for sending IKE_SA_INIT response.
But IKE packets sending on port 4500 should be encapsulated with NON-ESP-MARKER.

Thanks
Jyothi

-----Original Message-----
From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On Behalf Of Yoav Nir
Sent: Tuesday, March 09, 2010 5:24 PM
To: 'Keith Welter'; ipsec@ietf.org
Subject: Re: [IPsec] IETFLC comments for draft-ietf-ipsecme-ikev2bis-08

To me it's pretty obviously the former, although the latter is also true.

________________________________________
From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On Behalf Of Keith Welter
Sent: Monday, March 08, 2010 6:18 PM
To: ipsec@ietf.org
Subject: [IPsec] IETFLC comments for draft-ietf-ipsecme-ikev2bis-08

Section 2.23, paragraph starting: 
"An initiator can use port 4500 for both IKE and ESP, regardless of
 whether or not there is a NAT, even at the beginning of IKE.". 

What does, "even at the beginning of IKE" mean? 

Does it mean,
  "even when sending an IKE_SA_INIT request" 
or
  "even at any point during the initial exchanges"? 

_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec