RFC2409 中文翻译 中文RFC RFC文档 RFC翻译 RFC中文版

The ISAKMP SA is bi-directional. That is, once established, either party may initiate Quick Mode, Informational, and New Group Mode Exchanges. Per the base ISAKMP document, the ISAKMP SA is identified by the Initiator's cookie followed by the Responder's cookie-- the role of each party in the phase 1 exchange dictates which cookie is the Initiator's. The cookie order established by the phase 1 exchange continues to identify the ISAKMP SA regardless of the direction the Quick Mode, Informational, or New Group exchange. In other words, the cookies MUST NOT swap places when the direction of the ISAKMP SA changes.

ISAKMP SA是双向的。也就是说，一旦建立，任何一方都可以启动快速模式、信息模式和新的组模式交换。根据基本ISAKMP文档，ISAKMP SA由发起方的cookie和响应方的cookie标识——第1阶段交换中各方的角色决定了哪个cookie是发起方的cookie。第1阶段交换建立的cookie顺序继续标识ISAKMP SA，而不管快速模式交换、信息交换或新组交换的方向如何。换句话说，当ISAKMP SA的方向改变时，cookie不能交换位置。