(racoon 799) Re: Dual, synchronous quick mode

 In your previous mail you wrote:

   I am a (french) NetBSD/Racoon user, and I have an IKE/IPsec problem.
   It happens when, simultaneously, two hosts begin a quick mode with
   each other, with the same parameters. Accoding to my experiments, it
   ends with two SA created instead of one, which do not satisfy me.
   
=> this is explicitely addressed in IKE specs (but I am afraid
racoon as usual is not compliant at all about this).
The best text about this is in the IKEv2 draft and begins with:
   If the two ends have the same lifetime policies, it is possible that
   both will initiate a rekeying at the same time (which will result in
   ...

Regards

[email protected]