RE: Review of -10 security draft

["Bernard Aboba" <bernard_aboba@hotmail.com>]

>Can you confirm that draft 10 removes the requirement that every TCP
>connection must have a separate IKE Phase 2 SA?

That's the intent, yes.

>Some sections of the document seem to have been modified to reflect >this, 
>but I did notice an exception, in Section 1.2 (iFCP) "Each IPsec >SA 
>established by IKE protects a single TCP connection".

Thanks for finding this. I'll remove that one too.

>If this requirement has in fact been removed, it needs to be removed >from 
>the other draft documents, such as FCIP and iSCSI.

Yes. Once we've finished with -10, we will probably need another sync up.


_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com