[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

INVALID SPI Notify




> I just noticed that the Invalid SPI notify message in the notify draft is
> intended to indicate an unacceptable SPI received during a Phase 2
> negotiation.  Can Invalid SPI also be used when an IPsec packet is
> received on an unknown SPI, assuming a Phase 1 SA is established to the
> peer and the message can be encrypted.  If the answer is yes, what is the
> format everyone is using?  If the answer is no, then has this changed
> recently?
> 
> Victor
> 
> 


Follow-Ups: