[IPsec] IKEv2: Question on INFORMATIONAL exchange response motivation

2009-04-07 Thread Tero Kivinen
Matthew Cini Sarreo writes: > I would like to ask the reason behind this. As "live peer detection" is done > by sending an empty INFORMATIONAL exchange (Encrypted Payload with no > payloads), wouldn't it better to have a response be constructed in such a > way so that the requesting peer can explic

Re: [IPsec] IKEv2: Question on INFORMATIONAL exchange response motivation

2009-04-07 Thread Yoav Nir
t; on the responsder. If it doesn't match, it's an invalid message. From: ipsec-boun...@ietf.org [mailto:ipsec-boun...@ietf.org] On Behalf Of Matthew Cini Sarreo Sent: Tuesday, April 07, 2009 12:52 PM To: ipsec@ietf.org Subject: [IPsec] IKEv2: Ques

[IPsec] IKEv2: Question on INFORMATIONAL exchange response motivation

2009-04-07 Thread Matthew Cini Sarreo
Hello, While reading through ikev2 bis 02 (this is most certainly not something new that surfaced in this document), section 1.4, par 3 states: "Messages in an INFORMATIONAL exchange contain zero or more Notification, Delete, and Configuration payloads. The Recipient of an INFORMATIONAL exchange