Re: [IPsec] Another round of IKEv2-bis issues

>I do not want the current text to be removed just because some people
>think it is not clear as for me it is clear enough and it is something
>that needs to be mentioned, and I have not seen better text to replace
>it.

What about:

If any Child SA fails in such way that a delete notification cannot be
sent, then the corresponding IKE SA and all its associated Child SAs
MUST be deleted. If the IKE SA fails without being able to send a
delete message, then all Child SAs created by the IKE SA MUST be silently
deleted.

Dave Wierbowski

_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

• This message: [ Message body ]
• Next message: Thomas Narten: "[IPsec] Is IKEv2 mandatory to implement?"
• Previous message: Yoav Nir: "Re: [IPsec] New draft posted"
• In reply to: Tero Kivinen: "Re: [IPsec] Another round of IKEv2-bis issues"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]