Re: Issue: Should MOBIKE react to problems not known locally (#NEW)

Satoshi Inoue wrote:

>>Or should MOBIKE also deal with other problems, typically
>>based on the symptom of not getting packets through?
>>For instance, should MOBIKE attempt to do a failover
>>upon seeing
>>
>>- DPD failure
>>- ICMP error
>>- No response to the MOBIKE protocol messages
>>- No incoming payload packets
> 
> 
> failover to clear SAs? If so, then it sounds like it's out of scope
> for MOBIKE.

Do you mean that based on these "indirect" indications,
MOBIKE would terminate the SAs? I think this is not necessary,
normal IKEv2 mechanisms such as DPD will take care of it.

However, the question is whether a MOBIKE node should
attempt to use the peer's other address if one address
seems not to work. (This would be in addition to using
another address if the peer *told* you to use another
address.)

--Jari