Subject: [IPsec] ikev2bis issue #184: Interaction of rekeying of the IKE_SA and windows

From: Paul Hoffman <[email-masked]>
Date: Tue, 30 Mar 2010 16:59:35 -0700

s2.3: Should there be some discussion of the interaction of rekeying of the IKE_SA and windows? Presumably a rekey message should not be actioned until all previous messages have been responded to. Likewise receiving a Message ID with a sequence number bigger than that in the rekey message should be very suspect! Should the INVALID_MESSAGE_ID notification be sent in this case (and before or after the rekey?) There might be some knock on into s2.8 where rekeying is discussed. And maybe into s2.25?