Hi, In RFC 7296, Child SA rekey using CREATE_CHILD_SA may include multiple Notify payloads. VPP's current ikev2 plugin implementation seems to support multiple Notify payloads but to expect the REKEY_SA message is placed after any other Notify payloads. Some implementation sends rekey request with ESP_TFC_PADDING_NOT_SUPPORTED (without SPI) placed after REKEY_SA, but VPP cannot accept it unfortunately. Could you please review the patch[0] that enables to accept such rekey request?
[0] https://gerrit.fd.io/r/c/vpp/+/36809 -- Best regards, Atzm WATANABE
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21776): https://lists.fd.io/g/vpp-dev/message/21776 Mute This Topic: https://lists.fd.io/mt/92887834/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
