Patent ID: 11888982
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 23:
24. The network device of claim 23, wherein the at least one processor further executes the instructions to:
create a new SA and delete the SA;
wherein when the SA is an IKE SA, the rekey comprises creating a new IKE SA and deleting the IKE SA; the first SPI is the first network device's SPI which is used for the new IKE SA, and the second SPI is the second network device's SPI which is used for the new IKE SA;
wherein when the SA is an IPSec SA which is a child SA of the IKE SA, the rekey comprises creating a new IPSec SA and deleting the IPSec SA; the first SPI is used as an inbound SPI in the first network device for the new IPSec SA and the first SPI is used as an outbound SPI in the second network device for the new IPSec SA, and the second SPI is used as an inbound SPI in the second network device for the new IPSec SA and the second SPI is used as an outbound SPI in the first network device for the new IPSec SA.