MOBIKE provides a mechanism to update the address of IKE and IPsec SA without re-keying.
Peer is updated by sending an “address” update packet with the new address.
Peer updates the address after successful completion of RR on the new address.
What happens when the node is behind a NAT ?
The address in the “address” update packet is the private address. RR will fail.