[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Daemon Recovery

To: "Suren Arockia S." <suren@teil.soft.net>
Subject: Daemon Recovery
From: Pasvorn Boonmark <boonmark@juniper.net>
Date: Wed, 17 Sep 1997 10:10:39 -0700 (PDT)
Cc: ipsec@tis.com
In-Reply-To: <341F9CF5.15FB7483@teil.soft.net>
References: <v03102818b043588049d1@[128.89.0.110]><341F9CF5.15FB7483@teil.soft.net>
Sender: owner-ipsec@ex.tis.com

Suren Arockia S. writes:
 > I have a problem for which I donot have a proper solution.
 > After a complete negotiation between two ISAKMP peers (A and B),
 > the peer B crashes. When B recovers, ip packets from A reach
 > B with SPI values strange to B. Can someone suggest a method
 > to stop A from sending packets using OLD SPI values.
 > 

This would be the same as receiving INVALID SPI (page 59.)  It
basically said that what you want to do depended up on your security
policy.

Another thought is the use of SA error notification, but I'm not
sure.  I think someone would have comment on that.

 > Suren.
 > -- 
 >
------------------------------------------------------------------------------
 > Arockia S. Suren,
 > Specialist, Tata Elxsi India Ltd.
 > email: suren@teil.soft.net / Ph: 91-80-8452015
 >
------------------------------------------------------------------------------

References:

Re: Can the drafts which missed the Munich cutoff get reposted?

From: Stephen Kent <kent@bbn.com>

Daemon Recovery

From: "Suren Arockia S." <suren@teil.soft.net>

Prev by Date: Re: Which comes first?
Next by Date: Re: Which comes first?
Prev by thread: Daemon Recovery
Next by thread: Re: Daemon Recovery
Index(es):
- Main
- Thread