[IPsec] Who is the Initiator of rekeying CHILD SA?
Jaemin Park <jmpark81@gmail.com> Thu, 20 May 2010 15:37 UTC
Return-Path: <jmpark81@gmail.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9F3533A6C4C for <ipsec@core3.amsl.com>; Thu, 20 May 2010 08:37:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level:
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLPV+CNy3m8n for <ipsec@core3.amsl.com>; Thu, 20 May 2010 08:37:19 -0700 (PDT)
Received: from mail-yw0-f201.google.com (mail-yw0-f201.google.com [209.85.211.201]) by core3.amsl.com (Postfix) with ESMTP id 5F7943A6BEF for <ipsec@ietf.org>; Thu, 20 May 2010 08:37:19 -0700 (PDT)
Received: by ywh39 with SMTP id 39so2947071ywh.21 for <ipsec@ietf.org>; Thu, 20 May 2010 08:37:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=ffhSv4DoAJURUa/VQRltLtIWkjGgPxD6cxY04kpQSnY=; b=Cf0dPJOeR9pjMFn8FHxXvxTNIOitBHyeuFcNL+NCckqu++QVNXgmWDvBCiep91Q4E7 9FoENb9yeqzBcpNv4HLzd8ZiluyOjUhFPbmmeM+/Q2kOjK/phq/nfTR8KAaGpDRLQBm5 hPuRr39yBuZBUmubbVsS8hY0WLSnK3SzwA9gs=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=MvqryZ26MCQorLVaTUhl6H76b14hX1BkKo3ewEyaIl4RjQ8UyaO0yf8cL0ZRLwpVov Qz1CoVTosAiKXFcKAQZT1BKhBczSLQQBkSS110PQazsvskitCUx9sEkWhUlAtJVTcyC3 lNC6J6y2UGqRXzYwIF566nZm8LiM8NURlpKgI=
MIME-Version: 1.0
Received: by 10.229.189.147 with SMTP id de19mr48494qcb.198.1274369828166; Thu, 20 May 2010 08:37:08 -0700 (PDT)
Received: by 10.229.41.81 with HTTP; Thu, 20 May 2010 08:37:08 -0700 (PDT)
Date: Fri, 21 May 2010 00:37:08 +0900
Message-ID: <AANLkTil_ocYI_iSNbeJSSiAdmnxmRChd2R4vJhxGMgBF@mail.gmail.com>
From: Jaemin Park <jmpark81@gmail.com>
To: ipsec@ietf.org
Content-Type: multipart/alternative; boundary="0016361e7f06ebb398048708586b"
Subject: [IPsec] Who is the Initiator of rekeying CHILD SA?
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 May 2010 15:40:21 -0000
This can be the ridiculous question, but there exist some confusion in the context of initiator of CHILD SA around me. Suppose that host A and host B exist. Host A initiated the exchanges (IKE_SA_INIT & IKE_AUTH) to establish the IKE SA and CHILD SA with host B. (In this case, Host A is the Initiator and Host B is responder.) Then, host B (the responder of previous IKE exchange) initiated the CHILD SA rekeying (CREATE_CHILD_SA) with host A. In this case, who is the Initiator of rekeying CHILD SA? host B? or host A? According to the RFC4306, I think host B is the initiator of CHILD SA. Therefore, the fields such as SPIi, Ni and TSi should be the value of host B. Am I right?
- [IPsec] Who is the Initiator of rekeying CHILD SA? Jaemin Park
- Re: [IPsec] Who is the Initiator of rekeying CHIL… Kalyani Garigipati (kagarigi)