Subject: Re: [Mip6] question: SA update in dynamic keying scenario

From: Francis Dupont <[email-masked]>
Date: Tue, 07 Dec 2004 11:50:55 +0100

In your previous mail you wrote:

   > With IKEv2 IPsec SAs are managed and the IKE SA should be long term so
   > K=1 is really needed (i.e., it is no more a marginal optimization).
   
   Could you please elaborate more on this ?  Why K-bit becomes more
   important in IKEv2 ?
   
=> when the IKEv2 SA is closed all the IPsec SAs it has established
are closed too, so to update the IPsec SAs makes sense only when the
IKE SA is updated at the same time, i.e., when K=1.

Regards

[email-masked]

_______________________________________________
Mip6 mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/mip6