SA
Click on the red underlined text to get to the source
... security gateway in a main mode or aggressive mode exchange. This
IKE SA then serves to secure additional quick mode IPsec SAs ...
... server in a quick mode exchange. The DHCP SA is an IPsec tunnel
mode SA established to protect initial DHCPv4 ...
... DHCP SA is an IPsec tunnel
mode SA established to protect initial DHCPv4 traffic between the
...
... remote
host and the security gateway using the DHCP SA established in
step b. After the DHCP conversation completes, the remote host ...
... d. The remote host MAY request deletion of the DHCP SA since future
DHCP messages will be carried over a new IPsec ...
... remote host and the security gateway MAY
continue to use the same SA for all subsequent traffic by adding
temporary SPD ...
... tunnel is required, the remote host establishes a
tunnel mode SA to the security gateway in a quick mode exchange.
...
...
Since the security parameters used for different SAs are based on the
unique requirements of the remote host ...
... This section provides details relating to the messages exchanged
during the setup and teardown of the DHCP SAs.
...
... interface to the security gateway, an IKE Phase 1 SA is established
between the Internet interface ...
... lifetime for the DHCP SA SHOULD be on the order of minutes since it
will only be temporary. The remote host SHOULD use an IDci payload ...
... configuration lease, and is attempting to renew it. In the latter
case, the DHCP SA will initially be used to send a DHCPREQUEST rather
than a DHCPDISCOVER message ...
... DHCPDISCOVER or DHCPREQUEST) is then tunneled to the security
gateway using the tunnel mode SA. Note that since the DHCPDISCOVER
packet has a broadcast ...
... DHCPNAK message,
which is forwarded down the DHCP SA by the security gateway. The
remote host ...
... Internet interface can establish a new IPsec tunnel mode SA
to the security gateway. The remote host ...
... DHCPDECLINE, and DHCPRELEASE
messages will use the newly established VPN SA. Similarly, all DHCP
messages subsequently sent by the DHCPv4 server will be forwarded by
...
... security gateway (acting as a DHCP Relay) using the IPsec tunnel
mode SA, including DHCPOFFER, DHCPACK, and DHCPNAK ...