[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipsec
Subject:    RE: [Ipsec] Replicated identities across multiple remote access users
From:       "Geoffrey Huang" <ghuang () cisco ! com>
Date:       2005-01-24 17:08:05
Message-ID: 200501241708.BAX73384 () mira-sjc5-b ! cisco ! com
[Download RAW message or body]

Michael Richardson did a particularly good job summarizing a discussion the
ICSA had about this very subject:

http://www1.ietf.org/mail-archive/web/ipsec/current/msg01032.html

-g


________________________________

	From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On
Behalf Of Surya Batchu
	Sent: Sunday, January 23, 2005 2:15 PM
	To: ipsec@ietf.org
	Subject: [Ipsec] Replicated identities across multiple remote access
users
	
	
	In IPsec drafts and standards, there is no explicit prohition of
reusing the identity by remote access clients. It seems to me that, there
was an implicit understanding that each peer uses its own and unique
identity. Now, we have a need to support multiple remote access sessions
using the same identitiy. Some of the issues I can see are with
INITIAL-CONTACT and assignment of internal IP address (virtual IP address)
to the clients.
	 
	What are the other technical&deployment issues in allowing duplicate
identities from IKE based remote access clients?
	 
	Surya

	________________________________

	Do you Yahoo!?
	Yahoo! Search presents - Jib Jab's 'Second Term'
<http://us.rd.yahoo.com/evt=30648/*http://movies.yahoo.com/movies/feature/ji
bjabinaugural.html> 


_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec
[prev in list] [next in list] [prev in thread] [next in thread]