[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
IKE Delete payloads (clarification)
When I said "Or IKE assumes that the destination address is the LOCAL
address?"
I say it from the sender point of view, from the receiver it would be the
REMOTE address, of course.
Toni
-----Original Message-----
From: Barrera Antonio (NRC/Helsinki)
Sent: 06. September 2000 17:06
To: ipsec@lists.tislabs.com
Subject: IKE Delete payloads
If IKE wants to send a Delete payload for an IPSEC SA it can only
specify the SPI and protocol but not the destination address.
- These are the 3 things that identify a IPSEC SA so how can IKE know which
one should be erased?
- Or IKE assumes that the destination address is the LOCAL address?
(Then the remote end will never try to send using an SA that is no longer in
the local machine. There shouldn't be a problem for the other direction it
just it would be hanging there until it expires (no more used because no
longer in the local side and is only for incoming traffic))
Toni