Re: Higher level question about flow label

[Michael Thomas]

Brian E Carpenter writes:
 > The point is that when a packet crosses an administrative domain boundary,
 > the downstream ISP typically wants to reclassify the packet all over again, 
 > i.e. does not accept the incoming DSCP as definitive. This was a very
 > clearly stated ISP requirement at the start of diffserv and is fundamental
 > in the diffserv architecture.

Oh. I now see what I missed. Why doesn't including
the SPI into the flow key work? You wouldn't be
able to police based on port numbers (ie try to be
a firewall), but some would say that's a feature
not a bug.

        Mike
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------