Subject: [Softwires] New Version Notification for draft-ma-softwire-ipsec-gre-demultiplexing-ps-00

From: "MA, YUAN CHEN -HCHBJ" <[email-masked]>
Date: Wed, 20 Feb 2008 12:45:06 +0800

Dear all

The below draft on ipsec protected GRE tunnel demultiplexing
problem statement has been submitted and can be found here:
http://www.ietf.org/internet-drafts/draft-ma-softwire-ipsec-gre-demultiplexing-ps-00.txt

In softwire GRE is defined as one of the encapsulations for data plane.
It is also clearly mentioned in
draft-ietf-softwire-security-requirements-05.txt that
the softwire must support IPsec tunnel to securely transport such data packet.

However for IPsec protected GRE tunnels between the same pair of GWs
(same IP address pair), there is no existing solution to differentiate
different
GRE tunnels using IPsec traffic selector. This draft describes possible
scenarios where it is necessary to demultiplex IPsec protected GRE tunnels.
GRE key is proposed as the traffic selector for IPsec to demultiplex
GRE tunnels.

We would like to have your comments on this draft.
Thank you.

Regards
Yuanchen

---------- Forwarded message ----------
From: IETF I-D Submission Tool <[email-masked]>
Date: 2008-2-18 17:19
Subject: New Version Notification for
draft-ma-softwire-ipsec-gre-demultiplexing-ps-00
To: [email-masked]
Cc: [email-masked], [email-masked]

A new version of I-D,
draft-ma-softwire-ipsec-gre-demultiplexing-ps-00.txt has been
successfuly submitted by Yuanchen Ma and posted to the IETF
repository.

Filename:        draft-ma-softwire-ipsec-gre-demultiplexing-ps
Revision:        00
Title:           IPsec secured GRE tunnel demultiplexing problem statement
Creation_date:   2008-02-18
WG ID:           Independent Submission
Number_of_pages: 13

Abstract:
This document describes the IPsec secured GRE based VPN
demultiplexing problem statement.  When two or more IPsec SAs are
used to protect GRE encapsulated VPN network between the same pair of
edge router, the current GRE based VPN does not support the edge
router to demultiplex data for different IPsec SA.  GRE key provides
one solution to demultiplex the VPNs secured by IPsec.

The IETF Secretariat.

Disclaimer:
The contents of this e-mail, and its attachments, if any, are confidential and may be protected
by law against any unauthorized use.  If you have received this e-mail by mistake or have
reason to believe that you are not the intended recipient, please notify the sender by reply
e-mail as soon as possible and delete it from your computer system immediately thereafter.
If you are not the intended recipient, you must not copy this e-mail or attachment or disclose
the contents to any other person.  While we have made every effort to keep our network virus free,
we take no responsibility for any computer virus which might be transferred by way of this e-mail.

_______________________________________________
Softwires mailing list
[email-masked]
http://www.ietf.org/mailman/listinfo/softwires