avipsGlobalsInvalidSpiRecovery

This object determines whether invalid-spi-recovery 
is enabled (true) or disabled (false).
When enabled, the device shall open an IKE SA,
if it does not already exist, in order to 
send DELETE message to the remote peer when
receiving an invalid spi or invalid cookie 
with SIP of that remote peer.
This causes faster recovery times in case of 
SADB inconsistency, but may cause D/DoS attack
on the remote peer.

MIB

AVAYA-IPSEC-MIB

OID

.1.3.6.1.4.1.6889.2.6.1.1.1.1

Type

scalar

Access

readwrite

Status

current

Parent

avipsGlobals