Transition/mixed mode (Several possible approaches, here just one) Two kinds of addresses Protected addresses IPsec outgoing SPD indicates AH if used as source CGA header added before consulting IPsec SPD Unprotected addresses (non-SEND ones) IPsec outgoing SPD indicates PASS if used as source Need not be in separate address spaces as in the WG draft DAD as in the current WG draft ND cache indicates secure/unsecure status Same as in the ND options approach |