Re: issue #16

Hi Joe,

> While I appreciate that IKE should retry, or allow reconecting, which
> could involve different addresses (i.e., different source address used
> on retry/restart), managing the addresses seems like it should be a
> side-effect of the restart (leave the source address blank, let it be
> filled in on exit) rather than explicitly managed.

Do I interpret you correctly if I say that

(1) You are OK with explicit management of addresses
     when we have local information from the other
     parts of the stack that we need to do something,
     such as when the currently used link went down,
     ND tells us that we have moved to a new address,
     and so on.

(2) You are NOT OK with explicit management when
     DPD fails.

If this is correct, this would still leave us a
few questions, such as

o   What about other things than direct local knowledge
     that we may get from the rest of the stack. For instance,
     would explicit management be OK if you get persistent
     ICMP errors, do a DPD because of them, and then get
     a failure?

o   What does side-effect mean, exactly? Do you mean to
     say that the sender can choose any source address, as
     long as the selection is done by something lower in the
     stack than IKE? Or do you mean that source address
     selection is OK but destination address selection is not.
     Or something else?

--Jari