In your previous mail you wrote:

      No, actually, it was to have the MN send the
      BU's directly to the access router. On a router
      the BU just has an additional effect of removing
      any restrictions on source addresses it will 
      let through.

=> I believed your proposal was BU snooping. But you can name it
as you'd like, the purpose is to provide the knowledge of bindings,
so there is no deep difference with my proposal (i.e. I can say
you use a non-standard network access control device, as I don't
specify one (I only give an example with AAA because it is the best
on the paper) I could argue your proposal is included in mine :-).

      Hence Pekka's question about use of ICMP was correct.

=> I am reluctant to define new ICMPs for anything. There is already
a format for BUs, why a new thing?

Another point: HAOs are inside packets, to look at them is legitimate
for my firewall but not for any router on the path, i.e. I'd like
to have the check done once and others to trust it (this idea is
exactly the network access control).

Regards

[EMAIL PROTECTED]
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to