On Wed, 6 Sep 2023, Valery Smyslov wrote:
I would change this to:
"After completing an IKE negotiation, an IPsec peer wishing to verify
the viability of the current network path for ESP packets MAY initiate
an ESP Echo Request"
As in, you can do it immediately after the IKE SA is established, or at
any time later as well.
Completing IKE negotiation doesn't always mean that IPsec SAs are created.
(e.g., in case of childless IKE or non-fatal error in creating Child SAs).
More accurate text is needed.
Valery is right, sed "s/IKE/IPsec/" :)
Paul
_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec
