The quick start policy enables on-demand activation of a Security Association between the two endpoints. The Security Association is a wide Security Association allowing any type of traffic. Therefore, it can be activated by sending any type of traffic from the local host at 9.1.1.1 to the remote host at 9.1.1.2 as follows:
ping -s 9.1.1.1 9.1.1.2
CS V1R12: Pinging host 9.1.1.2
sendto(): EDC5111I Permission denied. (errno2=0x74420291)Because the Security Association does not exist, the initial ping attempt fails. After the negotiation for the Security Association has activated and the Security Association is established, a subsequent ping attempt succeeds as follows:
ping -s 9.1.1.1 9.1.1.2
CS V1R12: Pinging host 9.1.1.2
Ping #1 response took 0.001 seconds.