Input processing CGA header processing Verify that the source address matches with the key and parameters in the CGA header Create an SA, associated with source address IPsec processing Select the SA, based on the source address Verify the signature ND processing Verify the nonce, if a solicitated announcement If mixed mode is used, mark address as protected or unprotected based on whether AH was used or not |