Patent ID: 8275989
Filing Date: 2012-09-25
Classification: H04L

Abstract:
1. A method for executing a security policy at a first network device wherein the first network device is communicatively coupled to a second network device over a computer network, comprising: initiating a first main mode negotiation at the first network device by sending a first main mode message with a first set of proposed security parameters; determining, at the first network device, that the first main mode negotiation is unsuccessful, wherein the determination is based at least in part on a first response message received from the second network device; in response to receiving the first response message, initiating a second main mode negotiation, at the first network device, by sending a second main mode message with a second set of proposed security parameters; and receiving a second response message comprising at least part of a response to the second main mode message and at least part of a quick mode negotiation, wherein the second response message includes a main mode pseudo random number and a separate quick mode pseudo random number.