Re: [IPsec] Use of IKE to obtain address of home agent

[Tero Kivinen <kivinen at iki.fi>]

Hui Deng writes:
> ==> I can't imagine the issue if we include two payloads even without an
> transaction ID here. could you help to elaborate more, bascially, I assume
> there are consecutively ordered.

There is nothing in the current documents that says that the reply
payloads inside the reply packet must be in same order the request
payloads were in the request packet. Thus complient implementation
would be allowed to reorder them if they want to. Thus the initiator
receiving the reply cannot know which reply payloads was reply to
which request payload. Complient recipient can also remove some of the
requested attributes, and add new ones, so detecting things from the
attributes might not be possible. We could add such text to IKEv2bis,
but I think it is better not to add multiple configuration payloads to
one packet.
-- 
kivinen at safenet-inc.com
_______________________________________________
IPsec mailing list
IPsec at ietf.org
https://www.ietf.org/mailman/listinfo/ipsec