[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Lifetime mismatch during phase1



Hi all,

If, as a responder in a phase 1 exchange, I receive an SA proposal with a
lifetime exceeding the value allowed by local policy, what action should I
be taking ?.

Should I be sending back a RESPONDER-LIFETIME notify along with the SA
response (as described in the IPSEC DOI) or is the NOTIFY-SA-LIFETIME the
correct code to use during phase 1? If it's the later is there a description
of the parameters to the NOTIFY-SA-LIFETIME anywhere ?

Thanks,
John B.