On Fri, Oct 21, 2022 at 11:50 PM Erik Kline <ek.i...@gmail.com> wrote:

> I suppose you could try to add a "we're exempt from 8200" paragraph and
> see what happens.
>
> You could also just say that ASBRs are presumed to be communicating within
> a well-managed environment, are often zero or one hops away from one
> another, and that this environment MUST accommodate the larger MTU for
> tunnel-mode IPsec encapsulation.
>

I think this would take the form of an instruction like "you MUST NOT
activate RISAV unless your network has at least 13XX MTU to the internet
backbone" ... but what is "the backbone"?

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to