Re: [IPsec] Can one IPsec SA be established via two internet ports on one device?

2018-11-19 Thread Paul Wouters
On Mon, 19 Nov 2018, Linda Dunbar wrote: When you said “IPs are sourced loopbacks that are part of a prefix exported to the the isp(s) in each site”, do you mean that the private Loopback addresses of CPE1 & CPE2 are routable in all four  ISPs’ that connected to A1, A2, B1, B2? And to

[IPsec] Adam Roach's Yes on draft-ietf-ipsecme-split-dns-14: (with COMMENT)

2018-11-19 Thread Adam Roach
Adam Roach has entered the following ballot position for draft-ietf-ipsecme-split-dns-14: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to

Re: [IPsec] [I2nsf] Review of draft-ietf-i2nsf-sdn-ipsec-flow-protection-03

2018-11-19 Thread Rafa Marin Lopez
Hi Paul: First of all, thank you very much for this impressive review. We are going to process all your comments as soon as possible by separating our answers in different e-mails so that the discussion is easier to follow. In any case, we would like to answer first to your initial question

Re: [IPsec] Alexey Melnikov's Discuss on draft-ietf-ipsecme-split-dns-14: (with DISCUSS)

2018-11-19 Thread Alexey Melnikov
Hi Paul, On Mon, Nov 19, 2018, at 4:50 AM, Paul Wouters wrote: > On 2018-11-18 12:40 a.m., Alexey Melnikov wrote: > > -- > > DISCUSS: > > -- > > > > This is a

[IPsec] Can one IPsec SA be established via two internet ports on one device?

2018-11-19 Thread Linda Dunbar
IPsec experts, In the following diagram, CPE1 has two internet ports, A1 by one service provider, A2 by another service provider. CPE2 also have two ports facing two different internet service providers Question: can I establish ONE IPsec SA between CPE1 & CPE2? (i.e. between 10.1.1.1 &

Re: [IPsec] [Gen-art] Genart last call review of draft-ietf-ipsecme-split-dns-12

2018-11-19 Thread Alissa Cooper
Christer, thank you for your review. Tommy, thank you for addressing Christer’s comments. I entered a No Objection ballot. Alissa > On Oct 22, 2018, at 4:26 PM, Tommy Pauly wrote: > > Hi Christer, > > Thanks again for the review. I've addressed all three comments below in an > update to

Re: [IPsec] Can one IPsec SA be established via two internet ports on one device?

2018-11-19 Thread Linda Dunbar
Joel, Thanks for the help. When you said “IPs are sourced loopbacks that are part of a prefix exported to the the isp(s) in each site”, do you mean that the private Loopback addresses of CPE1 & CPE2 are routable in all four ISPs’ that connected to A1, A2, B1, B2? Linda From: joel jaeggli