Re: ISAKMP SA message #1 (proposing attributes/transforms)

[Thota Kiran Kumar <Kiran_Thota@pmc-sierra.com>]

Hi Venkat,

Yes, You should propose all attributes you support. In case,
you have an order of preference, you should order them
in the decreasing order of preference.
The responder chooses the first transform attribute(s) that
it supports and confirms it.

Regards,
- Kiran Kumar




On 26 Nov 2002, venkat wrote:

> Hi all,
>
> Protocol ID:	IPSEC_AH
> Transform ID:		AH_MD5
> Attributes(Auth Algo):		HMAC-MD5
> Attributes(Auth Algo):		HMAC-SHA
> Attributes(Encap Mode):		Tunnel
> Attributes(Encap Mode):		Transport
>
> Can we propose all the attributes we support so that the responder has
> an option to choose from our list and reply his conformation.
>
> e.g. IPSEC_AH(AH_MD5 transform) Security Association supporting HMAC_SHA
> Authentication Algorithm, IPSEC_AH(AH_SHA1 transform) SA supporting
> HMAC_MD5
>
> Thanks in advance
> - Venkat
>
>
> --------------------------------------------------------------
> Dexcel Electronics Designs (P) Ltd., Bangalore, India
>
>