Subject: [lisp] Security through NATs (Was: Re: #7: LISP ETRs ignoring checksum value in LISP UDP outer header on decapsulation)

From: Jari Arkko <[email-masked]>
Date: Tue, 08 Sep 2009 21:01:42 +0300

Sam,

>     Noel> Surely someone has defined a type of IP authentication that
>     Noel> works through a NAT box by now, though? The blasted things
>     Noel> are ubiquitous...
>
> Sure.  IPsec esp-null with NAT traversal.  or ip over TLS (I don't
> recommend this for us, but it's in wide use).
>   

Or any data object security mechanism, such as signing the records you 
transfer.

Jari