Re: does RFC mentioned about number of Idci and Idcr in quick mode
Jean-Francois Dive <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
You will always have HASH|SA|NONCE|IDci|IDcr payload in a valid quick
mode exchance (in msg 1). The first ID payload is the initiator id,
second beeing responder and this will always be the case.
If you want to negotiate more network pair accesses, you will need to
start multiple quick mode exchanges (they even can be negoatiated
concurently).
hope this help,
J.
On Fri, Apr 23, 2004 at 11:06:56AM -0700, Kulshreshtha, Naveen wrote:
> Hi,
>
>
>
> I have question about the number of IDci and IDcr in the Quick mode exchange. How many of each of them I can attach? Can I send more than one IDci and more than one IDcr? Does RFC mention that there should be only one IDci and one IDcr ?
>
>
>
>
>
> In the absence of any identification tagged to the ID payload, How can it be understand that which one is IDci and which one is IDcr ? While there is one IDci and one IDcr, sequence {first IDci and than IDcr} makes it sure that these payload identified properly .
>
>
>
> Thanks
>
> Naveen
>
>
>
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn
--
-> Jean-Francois Dive
--> [email protected]
I think that God in creating Man somewhat overestimated his ability.
-- Oscar Wilde