Re: Issue 71: Failing RR (was: Do we need text about failing RR)
<[email protected]> Wed, 16 Nov 2005 10:27:45 +0200
| Newsgroups | gmane.ietf.mobike |
|---|---|
| Message-ID | <[email protected]> |
Jari Arkko wrote: > OK. Somewhat edited version below: > > "MOBIKE uses the same Dead Peer Detection method as normal > IKEv2, but as addresses may change, it is not sufficient to > just verify that the peer is alive, but also that it is > synchronized with the address updates and has not, for > instance, ignored an address update due to failure to complete > return routability test. This means that when there are > incoming IPsec packets, MOBIKE nodes SHOULD inspect the > addresses used in those packets and determine that they > correspond to those that should be employed. If they do not, > such packets SHOULD NOT be used as evidence that the peer is > able to communicate with this node and or that the peer has > received all address updates." Looks OK to me. Best regards, Pasi