[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: ISAKMP SA negotiation

To: weaver@hydra.dra.hmg.gb, dharkins@cisco.com
Subject: RE: ISAKMP SA negotiation
From: Mary Quinn <mquinn@ftp.com>
Date: Tue, 01 Jul 1997 14:44:00 -0400
Cc: ipsec@tis.com
Sender: owner-ipsec@ex.tis.com

-----BEGIN PGP SIGNED MESSAGE-----

>>Reply to your message of 7/1/97 12:24 PM
Dan and Elfred,

Unless both machines are configured identically wrt policy, one of the machine's preferences is going to be violated. I don't see why it's better to violate the initiator's preference than to violate the receivers?

	>>Since both initiator and responder policies agree that both SA's are
	>>acceptable do we have a problem ?

I don't think so. A machine should not be sending a policy configuration that it cannot support or tolerate.

Mary


-----BEGIN PGP SIGNATURE-----
Version: 2.9

iQCVAgUBM7lP7Yqw4PUEyZEzAQE12gQAjKqt4qfMNbzQ7/xXeZz6tfWyvhCQztNR
Xr0RswQ5e/GlIVqxS0jc/UNSaEkv9+kin5OcJskowpc+BsSOECrYeEYvVSpLchm0
FuFMLNCYQDlJR3w8zUxyMYT+phX72gfYaJy9pETIPLoDR9Zs60qTPFjFsMZ9MAbq
alujWT4QcAc=
=uVRh
-----END PGP SIGNATURE-----

Prev by Date: Re: ISAKMP SA negotiation
Next by Date: Re: ISAKMP SA negotiation
Prev by thread: Re: ISAKMP SA negotiation
Next by thread: Re: ISAKMP SA negotiation
Index(es):
- Main
- Thread