softwire-2----Page:10
1 2 3 4 5 6 7 8 9 10 11 12 13
|
Softwire Control and Data Plane Protection The softwire control and/or data plane must be able to provide full payload security when desired. RFC3193 shows the usage of IPsec for L2TPv2 to provide tunnel authentication, privacy protection, integrity checking and replay protection. RFC3193 is applied in softwire model context (H&S) Softwire also requires NAT-traversal (Not covered in RFC3193). UDP encapsulation of IPsec ESP packets and negotiation of NAT-traversal in IKE MUST be supported in order to support NAT traversal. |