3.12.1 Abstract Data Model

  • Article

When this extension is implemented, the following additional state SHOULD<33> be maintained. This is an extension to IKE Protocol version 1 as specified in [RFC2409].

Main mode security association database (MMSAD): The entry for each MM SA contains the following fast-failover client-specific data elements:

  • InboundPacketTimeStamp: 1 octet, type: unsigned integer. A time stamp field that is present if the SA has the Fast Failover flag set as described in section 3.5.1.

  • A DeadPeerDetection flag: A flag that indicates whether the current SA is in dead peer detection mode.