> If you could design applications that can work with NAT 
> enroute, without needing an ALG; that would be great. 
> But, if the applications do require an ALG enroute 
> (as in the case of voice-over-IP which uses out-of-band 
> call-control segnalling), then the application designers should also 
> consider what it takes to build an ALG enroute. 

The problem of encrypted signaling remains, however.
Should you choose to deal with this problem by terminating
signaling on the ALG you have to consider the performance 
implications, as well, which have very real consequences 
when dealing with timing requirements imposed by 
interworking with the PSTN, where applicable.  Not to 
mention, of course, key management soup.  ALGs are a 
good solution for many NAT-related problems, but not 
for all of them.

Melinda
-- 
Melinda Shore
Member of the Scientific Staff
Nokia IP Telephony
127 West State Street
Ithaca, NY  14850
+1 607 273 0724 (office)
+1 607 275 3610 (fax)
+1 607 227 4096 (mobile)
[EMAIL PROTECTED]

Reply via email to