Re: [IPsec] IKEv2-bis, conformance requirements

2010-01-26 Thread Valery Smyslov
Hi Tero, Tero Kivinen writes: > >A minimal IPv4 responder implementation will ignore the contents of > >the CP payload except to determine that it includes an > >INTERNAL_IP4_ADDRESS attribute and will respond with the address and > >other related attributes regardless of whether

Re: [IPsec] IKEv2-bis, conformance requirements

2010-01-26 Thread Yaron Sheffer
; Of Tero Kivinen > Sent: Tuesday, January 26, 2010 11:16 > To: Valery Smyslov > Cc: ipsec@ietf.org > Subject: [IPsec] IKEv2-bis, conformance requirements > > Valery Smyslov writes: > > Section 4 lists conformance requirements for IKEv2 implementations. > > > >

[IPsec] IKEv2-bis, conformance requirements

2010-01-26 Thread Tero Kivinen
Valery Smyslov writes: > Section 4 lists conformance requirements for IKEv2 implementations. > > First, the following text: > >Every implementation MUST be capable of doing four-message >IKE_SA_INIT and IKE_AUTH exchanges establishing two SAs (one for IKE, >one for ESP or AH). > >

[IPsec] IKEv2-bis, conformance requirements

2010-01-25 Thread Valery Smyslov
Section 4 lists conformance requirements for IKEv2 implementations. First, the following text: Every implementation MUST be capable of doing four-message IKE_SA_INIT and IKE_AUTH exchanges establishing two SAs (one for IKE, one for ESP or AH). is formally incorrect, because IKE_AUTH r