At 5:32 PM +0530 3/31/09, Kalyani Garigipati (kagarigi) wrote: >Hi , > >Please clarify the following . > >1. Is it mandatory or optional (implementation dependent) to create an >IKEV2 sa when IKE_AUTH exchange fails for reason like >NO_PROPOSAL_CHOSEN, TS_UNACCEPTABLE, >SINGLE_PAIR_REQUIRED,INTERNAL_ADDRESS_FAILURE, and FAILED_CP_REQUIRED ?
I am unclear on what you are asking. The IKE SA is already set up when the child SA creation fails. Thus, it does not need to be created. --Paul Hoffman, Director --VPN Consortium _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
