In your previous mail you wrote: I would claim this is incorrect behavior in IKEv2. There is a NOTIFY error code "INVALID-SPI" specifically for this case. I would claim it was a ... => which INVALID-SPI: there are two defined in the current document (:-)? Regards Francis.Dupont@enst-bretagne.fr