Re: XAUTH_STATUS attribue

["Stephane Beaulieu" <stephane@xxxxxxxxx>]

> Hi,
> 1)In which scenarios can a Ipsec Host send the XAUTH_STATUS attribute set
> to fail?

Any time you want to I suppose.  We do it when the user aborts the
connection in the middle of an XAUTH transaction.

> 2)I have noticed in one product that it is sending the XAUTH_STATUS
> attribute in ISAKMP-CFG-ACK message and the value is '0'.So should i
> disacard that XAUTH_STATUS attribute or else should I take any action?

That depends on how strict you want your code to be.  Mode-cfg says it must
return the zero length attribute that is being ACK'd.  So, technically it is
wrong.


>
> bye
>
>
>
> **************************************************************
> Wealth is lost Nothing is lost
> Health is lost Something is lost
> Character is lost Everything is lost
>
> ****************************************************************