Re: (ngtrans) ISATAP-04 comments/questions

["Fred L. Templin" <[e-mail]>]

Jason,

Jason Goldschmidt wrote:
 > On Fri, 28 Jun 2002, Mohit Talwar wrote:
>>Given this, as long as the ISATAP router resides in the parent
>>domain, a host in any sub-domain would be able to resolve its
>>name correctly.
>
> Am I to understand from this statement that when deploying an ISATAP
> router for a multidomained enterprise environment, the ISATAP router is
> best placed in the parent domain?  Is this something worth mentioning in
> the ISATAP draft and/or in draft-ietf-ngtrans-isatap-scenario-00.txt?

On this particular subject, I do not believe Mohit was intending
to imply any specific deployment scenarios or limitations in ISATAP's
applicability. Deploying ISATAP routers in the parent domain only is
one alternative, but there may be reasons for deploying them in sub-
domains as well, e.g., when the Enterprise/Managed network contains
multiple security compartments. (See the discussions with Pekka Savola 
on this subject in the NGTRANS mailing list dated 6/27/2002.)

Clearly, this is something that bears mention either in an update
to 'draft-ietf-ngtrans-isatap-scenario-00.txt' or in future works
that may emerge from the Enterprise/Managed Networks design team.
But, I see no inconsistencies or limitations in the ISATAP
specification itself.

Regards,

Fred
[e-mail]