[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

FW: Negotiation for Ipsec SA

To: "IpsecMailingList (E-mail)" <ipsec@lists.tislabs.com>
Subject: FW: Negotiation for Ipsec SA
From: "Awan kumar" <awank@future.futsoft.com>
Date: Tue, 10 Oct 2000 13:11:17 +1000
Importance: Normal
Reply-To: <awank@future.futsoft.com>
Sender: owner-ipsec@lists.tislabs.com

Hi,
   I am sorry if this has been discussed earlier. I have some doubt in the
negotiation of Ipsec SA.  When Ipsec decides to establish an Ipsec SA and
sends an SADB_ACQUIRE (PF_KEY Mesage) to the key management daemon.

1) For how much time should we wait for the SA to get negotiated. I feel
this is required.

2) If my first point is relevant, then should the time for the renegotiation
of the Ipsec SA, after the soft lifetime expires, be less then the
difference of the soft and hard seconds lifetime.


 Any comments on this are most welcome.


Awan Kumar Sharma

Follow-Ups:

Re: FW: Negotiation for Ipsec SA

From: Dan McDonald <Dan.McDonald@Eng.Sun.COM>

Prev by Date: Re: Reliable delete notifies
Next by Date: Re: Reliable delete notifies
Prev by thread: Re: Help - IPSEC beginner
Next by thread: Re: FW: Negotiation for Ipsec SA
Index(es):
- Main
- Thread