Re: [IPsec] About port floating b/w 4500 and 500

Hi Tero, Many thanks for answering all the questions. Regards, Srinivas -Original Message- From: Tero Kivinen [mailto:kivi...@iki.fi] Sent: Wednesday, June 17, 2009 5:48 PM To: Srinivasu S R S Dhulipala (srinid) Cc: ipsec@ietf.org Subject: [IPsec] About port floating b/w 4500 and 500

[IPsec] About port floating b/w 4500 and 500

Srinivasu S R S Dhulipala (srinid) writes: > With the above NAT-T and MOBIKE in the context, I've the following > questions: > > 1) Can an IKE peer that migrated to 4500 for some reason migrate back to > 500 later? Is that allowed? If using MOBIKE it is very clear it cannot migrate back, as M

[IPsec] About port floating b/w 4500 and 500

Hi team, I request clarification here. Sec 2.23 "NAT traversal" on Page 58 of draft-ietf-ipsecme-ikev2bis-03.txt says : An initiator can float to port 4500, regardless whether or not there is NAT, even at the beginning of IKE. When either side is using port 4500, sending with UDP encap