Re: IKE Delete payloads

[Henry Spencer <henry@spsystems.net>]

On Wed, 6 Sep 2000 antonio.barrera@nokia.com wrote:
> 	If IKE wants to send a Delete payload for an IPSEC SA it can only
> specify the SPI and protocol but not the destination address.
> - These are the 3 things that identify a IPSEC SA so how can IKE know which
> one should be erased? 
> - Or IKE assumes that the destination address is the LOCAL address? 

The wording here is not very clear, but the statement that the SPI is
"the sending entity's SPI", and the following NOTE indicating that
receiver->sender communication will fail if the Delete is ignored, makes
it pretty much necessary that the implicit destination address is that of
the sender.

                                                          Henry Spencer
                                                       henry@spsystems.net

---

References:

• IKE Delete payloads
• From: antonio.barrera@nokia.com

---

• Prev by Date: Re: Connecting IPSec tunnels
• Next by Date: RE: I-D ACTION:draft-lordello-ipsec-vpn-doi-00.txt
• Prev by thread: IKE Delete payloads
• Next by thread: IKE Delete payloads (clarification)
• Index(es):
  • Main
  • Thread