Re: [IPsec] Who is the Initiator of rekeying CHILD SA?

"Kalyani Garigipati (kagarigi)" <kagarigi@cisco.com> Fri, 21 May 2010 08:30 UTC

Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CAF8AA.9FD20A23"
Date: Fri, 21 May 2010 11:28:23 +0530
Message-ID: <E2C4BA03EFC52048969B27A016F10C5402FDB38D@XMB-BGL-416.cisco.com>
In-Reply-To: <AANLkTil_ocYI_iSNbeJSSiAdmnxmRChd2R4vJhxGMgBF@mail.gmail.com>
Thread-Topic: [IPsec] Who is the Initiator of rekeying CHILD SA?
Thread-Index: Acr4MsfgGIBBizf1SiiP+W6dImD//AAd7lPQ
References: <AANLkTil_ocYI_iSNbeJSSiAdmnxmRChd2R4vJhxGMgBF@mail.gmail.com>
From: "Kalyani Garigipati (kagarigi)" <kagarigi@cisco.com>
To: Jaemin Park <jmpark81@gmail.com>, ipsec@ietf.org
Subject: Re: [IPsec] Who is the Initiator of rekeying CHILD SA?
Precedence: list

Hi Jaemin,

 

You are right, Since B is initiating the exchange the values of SPIi,
Ni, and TSi will be the values of host B

 

Regards,

kalyani

 

________________________________

From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On Behalf
Of Jaemin Park
Sent: Thursday, May 20, 2010 9:07 PM
To: ipsec@ietf.org
Subject: [IPsec] Who is the Initiator of rekeying CHILD SA?

 

This can be the ridiculous question, but there exist some confusion in
the context of initiator of CHILD SA around me.

 

Suppose that host A and host B exist.

 

Host A initiated the exchanges (IKE_SA_INIT & IKE_AUTH) to establish the
IKE SA and CHILD SA with host B. (In this case, Host A is the Initiator
and Host B is responder.)

Then, host B (the responder of previous IKE exchange) initiated the
CHILD SA rekeying (CREATE_CHILD_SA) with host A.

 

In this case, who is the Initiator of rekeying CHILD SA? host B? or host
A?

According to the RFC4306, I think host B is the initiator of CHILD SA. 

Therefore, the fields such as SPIi, Ni and TSi should be the value of
host B. Am I right?

[IPsec] Who is the Initiator of rekeying CHILD SA? Jaemin Park
Re: [IPsec] Who is the Initiator of rekeying CHIL… Kalyani Garigipati (kagarigi)