Re: [MEXT] TLV header in DSMIP

["Vijay Devarapallli" <dvijay at gmail.com>]

On Fri, Apr 4, 2008 at 2:42 AM,  <Pasi.Eronen at nokia.com> wrote:
> Vijay Devarapallli wrote:
>
>  > Without this, you end up using UDP port 4500 for IPsec protected
>  > data traffic between the mobile node and the home agent and the
>  > DS-MIPv6 UDP port for non-IPsec protected data traffic between the
>  > mobile node and the home agent. I would prefer to avoid this.
>
>  In the current spec (version -01) this is precisely the situation:
>  traffic protected with IPsec tunnel mode uses port 4500.

Ok, got it. I looked at the security considerations section again. I
forgot that in version 06, we mandate that port 4500 is always used
for IPsec protected payload traffic, irrespective of whether we use
vanilla UDP or TLV-header UDP encapsulation. In version 05 and
earlier, we didn't have this restriction. One could use the TLV-header
UDP encapsulation (and the DS-MIPv6 port) for the IPsec protected
payload traffic too.

Since we mandate that port 4500 is always used, it does not make sense
to reserve the 'IPsec Type" value in the TLV header. So, we can remove
that.

Vijay

>  (BU/BAck is protected with transport mode IPsec, but in that case,
>  the packet also has an IPv6 header, so the TLV-Header type would
>  be IPv6.)
>
>  Best regards,
>  Pasi
>
_______________________________________________
MEXT mailing list
MEXT at ietf.org
https://www.ietf.org/mailman/listinfo/mext