[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Timeout problems

To: Stephane Beaulieu <sbeaulieu@TimeStep.com>
Subject: RE: Timeout problems
From: Tero Kivinen <kivinen@ssh.fi>
Date: Thu, 15 Jul 1999 18:21:24 +0300 (EET DST)
Cc: "'Joern Sierwald'" <joern.sierwald@datafellows.com>, ipsec@lists.tislabs.com
In-Reply-To: <319A1C5F94C8D11192DE00805FBBADDF1F5B49@exchange>
Organization: SSH Communications Security Oy
References: <319A1C5F94C8D11192DE00805FBBADDF1F5B49@exchange>
Sender: owner-ipsec@lists.tislabs.com

Stephane Beaulieu writes:
> The delete payload should work; assuming you really want to do this.  If you
> tell the other guy that you've deleted your phase1 SA, then he should stop
> sending you ISAKMP messages for that SA.  However, I believe that your best
> option is to increase you retry counts / times.

What is the spi and protocol of the configuration mode exchange? To
fill in delete payload you need spi and protocol, and configuration
mode does not have them. I think it is overkill to kill the whole
ISAKMP SA in that case.

References:

RE: Timeout problems

From: Stephane Beaulieu <sbeaulieu@TimeStep.com>

Prev by Date: Re: starting on asking THE QUESTION
Next by Date: Re: starting on asking THE QUESTION
Prev by thread: RE: Timeout problems
Next by thread: RE: Timeout problems
Index(es):
- Main
- Thread