5 ms·

I thought that was the point of the Authentication Header Sequence Number and the sliding window? If you can tolerate occasional lost packets you can require th

by kogir 13y ago

I thought that was the point of the Authentication Header Sequence Number and the sliding window? If you can tolerate occasional lost packets you can require they only increase and achieve complete protection, no?

Bino 13y ago
Yes, you're absolutely right about the existence of Seq. Numbers in IPsec. However, it might not always be enabled, that is if you're using manual keying (and not IKE). http://www.ietf.org/mail-archive/web/ipsec/current/msg05871.html http://www.ietf.org/mail-archive/web/ipsec/current/msg05871....