Michael Richardson writes:
>
> Let me suggest a situation where perhaps I would like to bring up
> an IKE_SA and not a CHILD_SA: it might be for just sending initial
> contact, and perhaps even a DELETE.
>
> I sometimes move quickly from being "outside" my IPsec gateway/firewall
> (such as being
Yoav Nir writes:
> A far more common situation is when I'm "outside", not moving
> anywhere, and I want to connect. I haven't even opened my mail
> client yet, or launched the browser (because those thing hate it
> when the VPN client changes routing to addresses they are trying to
> reach).
>
>
