Multiple transforms in New Group mode

["Valery Smyslov" <svan@trustworks.com>]

Hi,

I have a question regarding New Group mode. Is it possible to put 
multiple transforms proposing different groups into one SA in New 
Group mode? IKE says nothing about this, so it is not explicitly 
prohibited. However, if it is allowed, what semantics does it have 
for responder? Should responder select only one group (usual SA 
semantics) or is he/she allowed to select multiple of them, or must 
he/she always accept/reject all the proposals?

How other vendors handle this situation?

Best regards, 
Valera.

---

Follow-Ups:

• Multiple transforms in New Group mode
• From: Tero Kivinen <kivinen@ssh.fi>

---

• Prev by Date: Re: Bruce Schneier on IPsec
• Next by Date: Multiple transforms in New Group mode
• Prev by thread: DoS Attacks review?
• Next by thread: Multiple transforms in New Group mode
• Index(es):
  • Main
  • Thread