Subject: [MSEC] question on your NAT comment from IETF-78

From: "Sheela Rowles (sheela)" <[email-masked]>
Date: Thu, 9 Sep 2010 08:29:00 -0700

Hi Tero,

I missed the  IETF-78 meeting but have a question based on the posted
minutes. 

Can you please clarify this comment:

"We can not use NAT-T with IPsec port 4500 for GDOI.

              It can cause issues.

Brain - If both IKE (500) and GDOI (848) migrate to 4500 It could be an
issue for the receiver to demux to the right key management protocol.

Tero: For IKE traffic, you can use same port 848, for IPsec packets, you
can use NAT-T. 

"

So my question is - why can't NAT-T be used with GDOI using port 4500?

Thanks,

Sheela