Quote from, RFC4306 (aka IKEv2): I think the mind they are thinking of looks something like this
"Assembly of Security Association payloads requires great peace of mind."
one honk maybe more
kouett@soc.kouett.ne..
replied 23 Aug 2023 13:33 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/4m1f3YL65Wq415L747
sully@splodge.fluff...
replied 23 Aug 2023 13:55 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/4m1f3YL65Wq415L747
@benjojo Tunnels aren't in my purview anymore but I've never had a useful log message from IOS yet which would give me a steer on which part of the big IPSEC machinery needs looking at when a tunnel doesn't work, normally resorted to triple checking config and values