On Fri, 2005-06-24 at 11:58, Roland Dreier wrote: > Hal> I think this part is simpler than this. Aren't the > Hal> primary/alternate GIDs in the CM REQ ? > > Yes, but the remote peer could lie, right? So there needs to be one more SA lookup to validate that the GID is associated with the LID. Same issue for APM too. -- Hal