Re: draft-ietf-kink-kink-08.txt

[Shoichi Sakane <sakane@xxxxxxxx>]

ISAKMP Delete payload can not indicate direction of SA.  The section 3.3
should describe that the payload contain which direction of SA.

   3.3.  DELETE Message Flow

      The DELETE command deletes existing SAs.  The DOI specific payloads
      describe the actual SA to be deleted.  For the IPSEC DOI, those
      payloads will include an ISAKMP payload containing the SPI to be
      deleted in each direction.

I would like to add the following text to clear it.

   The ISAKMP payload contains ISAKMP Delete payload(s) which is
   indicated to the inbound SA for the initiator of this flow.  KINK
   does not allow half-open SAs, thus when the responder receives a
   DELETE command, it MUST delete SAs of both sides, and MUST reply with
   ISAKMP Delete Payload which is also indicated to the inbound SA for
   the responder of this flow.  If the receiver cannot find an
   appropriate SPI to be deleted, it MUST return an ISAKMP notification
   with INVALID_SPI, which also serves to inform the initiator that it
   can delete the inbound SA.