
|
Issue 6 “When to do return routability checks?” After updating the SAs or any time after that, if required by local policy Version –02 does not mandate any particular policy: next version will probably say that default policy should be “do RR after updating the SAs, if not done for this address in this IKE_SA before” Does not prohibit fancier policies like “don’t do RR for addresses contained in the certificate” |