[Softwires] New Version Notification for draft-ma-softwire-ipsec-gre-demultiplexing-ps-00

["MA, YUAN CHEN -HCHBJ" <ycma at hitachi.cn>]

Title: Fwd: New Version Notification for draft-ma-softwire-ipsec-gre-demultiplexing-ps-00

Dear all

The below draft on ipsec protected GRE tunnel demultiplexing
problem statement has been submitted and can be found here:
http://www.ietf.org/internet-drafts/draft-ma-softwire-ipsec-gre-demultiplexing-ps-00.txt

In softwire GRE is defined as one of the encapsulations for data plane.
It is also clearly mentioned in
draft-ietf-softwire-security-requirements-05.txt that
the softwire must support IPsec tunnel to securely transport such data packet.

However for IPsec protected GRE tunnels between the same pair of GWs
(same IP address pair), there is no existing solution to differentiate
different
GRE tunnels using IPsec traffic selector. This draft describes possible
scenarios where it is necessary to demultiplex IPsec protected GRE tunnels.
GRE key is proposed as the traffic selector for IPsec to demultiplex
GRE tunnels.

We would like to have your comments on this draft.
Thank you.

Regards
Yuanchen

---------- Forwarded message ----------
From: IETF I-D Submission Tool <idsubmission at ietf.org>
Date: 2008-2-18 17:19
Subject: New Version Notification for
draft-ma-softwire-ipsec-gre-demultiplexing-ps-00
To: ycma610103 at gmail.com
Cc: denghui at chinamobile.com, yingzhe.wu at zteusa.com



A new version of I-D,
draft-ma-softwire-ipsec-gre-demultiplexing-ps-00.txt has been
successfuly submitted by Yuanchen Ma and posted to the IETF
repository.

Filename:        draft-ma-softwire-ipsec-gre-demultiplexing-ps
Revision:        00
Title:           IPsec secured GRE tunnel demultiplexing problem statement
Creation_date:   2008-02-18
WG ID:           Independent Submission
Number_of_pages: 13

Abstract:
This document describes the IPsec secured GRE based VPN
demultiplexing problem statement.  When two or more IPsec SAs are
used to protect GRE encapsulated VPN network between the same pair of
edge router, the current GRE based VPN does not support the edge
router to demultiplex data for different IPsec SA.  GRE key provides
one solution to demultiplex the VPNs secured by IPsec.



The IETF Secretariat.

---

Disclaimer:
The contents of this e-mail, and its attachments, if any, are confidential and may be protected by
law against any unauthorized use.  If you have received this e-mail by mistake or have reason to
believe that you are not the intended recipient, please notify the sender by reply e-mail as soon
as possible and delete it from your computer system immediately thereafter.  If you are not the
intended recipient, you must not copy this e-mail or attachment or disclose the contents to any
other person.  While we have made every effort to keep our network virus free, we take no
responsibility for any computer virus which might be transferred by way of this e-mail.

---

_______________________________________________
Softwires mailing list
Softwires at ietf.org
http://www.ietf.org/mailman/listinfo/softwires