ipsec April 2010 archive
Main Archive Page > Month Archives  > ipsec archives
ipsec: Re: [IPsec] Another round of IKEv2-bis issues

Re: [IPsec] Another round of IKEv2-bis issues

From: David Wierbowski <wierbows_at_nospam>
Date: Thu Apr 29 2010 - 15:01:48 GMT
To: Tero Kivinen <kivinen@iki.fi>

>I do not want the current text to be removed just because some people
>think it is not clear as for me it is clear enough and it is something
>that needs to be mentioned, and I have not seen better text to replace

What about:

If any Child SA fails in such way that a delete notification cannot be
sent, then the corresponding IKE SA and all its associated Child SAs
MUST be deleted. If the IKE SA fails without being able to send a
delete message, then all Child SAs created by the IKE SA MUST be silently

Dave Wierbowski

IPsec mailing list