[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Q on Traffic Selector Payload
The reason they're in IKE_AUTH is because creation of
the first child SA is piggybacked on the initial
creation of the IKE SA. (so really the IKE-AUTH
is doing a CREATE_CHILD_SA simultaneously).
"Ricky Charlet" <firstname.lastname@example.org> wrote:
> Why are there TS payloads in both IKE_AUTH and CREATE_CHILD_SA?
>Section 2.9 "Traffic Selector Negotiation" seems to discuss the TS
>payloads only in the context of CREATE_CHILD_SA.
>(formerly with Sonicwall and before that Redcreek)