Re: SPI collision Re: FW: Tuomas Aura's review of draft-ietf-mobike-protocol-03

Mohan Parthasarathy writes:
> Yes, this is the case. Now, when R receives the
> UPDATE_IP_ADDRESSES, it need to update the information
> in SA about where the packets should be tunneled out.
> How do you locate the SA to update its peer address ?

The UPDATE_IP_ADDRESSES is IKE SA operation, that is done on the IKE
SA, and each IPsec SA is tied to the IKE SA, thus all IPsec SAs
affected can be found by finding the IPsec SAs created by this IKE SA
(similarly what you do when the IKE SA is deleted, and you need to
find all IPsec SAs created by IKE SA so you can delete them). 
-- 
[email protected]