Re: [IPsec] Proposed work item: Failure detection in IKEv2 - YES

2009-12-03 Thread Min Huang
I am interested in discussing on this topic further. I would like to review this draft. regards, Min Sun, 29 Nov 2009 19:18:59 +0200, Yaron Sheffer wrote: This work item proposes an IKEv2 extension to allow an IKE peer to quickly and securely detect that its opposite peer has lost state. Thi

Re: [IPsec] Proposed work item: Failure detection in IKEv2 - YES

2009-12-01 Thread Matthew Cini Sarreo
Hello all, I myself do not like the current method for detecting that a peer has lost state (generally this means waiting for a number of retransmits, whom each of which has a time out). In my opinion this would be a good item for the WG to work on and would enhance IKEv2. I would like to review t

Re: [IPsec] Proposed work item: Failure detection in IKEv2 - YES

2009-12-01 Thread Raj Singh
Hi Team, According to me, we need to support this draft as WG item as it appears to enhance the failure detection time. Currently, there are many scenarios, in which we detect and delete stale SA only by max. re-transmits. I would like to review this draft. Regards, Raj 2009/11/29 Yaron Sheffer