Subject: [Hipsec] Issue 21: Forced ESP sending upon receiving a reply NES

From: [email-masked] (Pekka Nikander)
Date: Mon Oct 6 07:25:01 2003

I added the following paragraph towards the end of Section 8.9.2,
Processing a reply NES packet:

   5.  If the system has no data to send for 500ms, it
       SHOULD send an ESP packet anyway.  The purpose of this
       packet is to acknowledge the other party that the NES
       reply came through, and to allow the other party to switch over
       to the new outgoing SA.  It is RECOMMENDED that the system
       sends an empty ESP packet, i.e., one where the Next
       Header field is IPPROTO_NONE (decimal 59).</t>

A SHOULD instead of a MUST since this can be hard to implement
in some systems.

OK to everybody?

--Pekka Nikander