[thirdparty/strongswan.git] / doc / src / responderstate.txt

                |
                | IKE main mode 
                |  phase 1
                V
        .-----------------.  
        | unauthenticated | 
        |     OE peer     |
        `-----------------'
                |
                | lookup KEY RR in in-addr.arpa 
                |             (if ID_IPV4_ADDR)
                | lookup KEY RR in forward
                |             (if ID_FQDN)
                V
        .-----------------.  RR not found
        |   received DNS  |---------------> log failure
        |     reply       | 
        `----+--------+---'
     phase 2 |        \      misformatted 
    proposal |         `------------------> log failure
             V
    .----------------.
    |  authenticated |  identical initiator 
    |     OE peer    |--------------------> initiator 
    `----------------'  connection found    state machine
         |
         | look for TXT record for initiator
	 |
         V  
   .---------------.
   |  authorized   |---------------------> log failure
   |    OE peer    |
   `---------------'
         |
         |
         V
    potential OE
    connection in
    initiator state
	machine


$Id: responderstate.txt,v 1.1 2004/03/15 20:35:24 as Exp $
Commit	Line	Data
997358a6 MW	1	\|
	2	\| IKE main mode
	3	\| phase 1
	4	V
	5	.-----------------.
	6	\| unauthenticated \|
	7	\| OE peer \|
	8	`-----------------'
	9	\|
	10	\| lookup KEY RR in in-addr.arpa
	11	\| (if ID_IPV4_ADDR)
	12	\| lookup KEY RR in forward
	13	\| (if ID_FQDN)
	14	V
	15	.-----------------. RR not found
	16	\| received DNS \|---------------> log failure
	17	\| reply \|
	18	`----+--------+---'
	19	phase 2 \| \ misformatted
	20	proposal \| `------------------> log failure
	21	V
	22	.----------------.
	23	\| authenticated \| identical initiator
	24	\| OE peer \|--------------------> initiator
	25	`----------------' connection found state machine
	26	\|
	27	\| look for TXT record for initiator
	28	\|
	29	V
	30	.---------------.
	31	\| authorized \|---------------------> log failure
	32	\| OE peer \|
	33	`---------------'
	34	\|
	35	\|
	36	V
	37	potential OE
	38	connection in
	39	initiator state
	40	machine
	41
	42
	43	$Id: responderstate.txt,v 1.1 2004/03/15 20:35:24 as Exp $