Re: Zero Address Set

On Wed, 2004-12-08 at 05:42, Jari Arkko wrote:
> You could also see this function as orthogonal to MOBIKE, i.e.,
> another IKEv2 feature that can be used to temporarily suspend
> all IKE and payload packet flows.

I think the on-the-wire protocol representation falls out automatically
from whatever mobike-defined IKE extension is used to add or delete
addresses from the established IKE SA.

end systems which don't implement this would treat this as a tunnel
tear-down request.

end systems which do implement it would "cap" the tunnel until the peer
resumed, some implementation-specific timer expired, or administrative
action deleted the tunnel.

an end system implementing this would need to be able to cope with lost
state on the peer anyway.

							- Bill