Communication device and method therein for facilitating ike communications

A first communication device, comprising a communication interface, a processor and a memory, the memory comprising instructions executable by the processor whereby the first communication device is operative to perform operations comprising:

• transmit, to a second communication device, a first Internet Key Exchange, IKE, Authentication, IKE_AUTH, request;
• receive, from the second communication device, a second IKE_AUTH request;
• transmit, to the second communication device in response to the second IKE_AUTH request, a second IKE_AUTH response;
• and
• receive, from the second communication device, a first IKE_AUTH response as a response to the first IKE_AUTH request,
• wherein the first IKE_AUTH request and/or the second IKE_AUTH response contains a notification indicating a first policy supported by the first communication device for identifying duplicated IKE Security Associations, SAs, and the second IKE_AUTH request and/or the first IKE_AUTH response contains a notification indicating a second policy supported by the second communication device for identifying duplicated IKE SAs, thereby enabling creation of a policy supported by both the first communication device and the second communication device for identifying duplicated IKE SAs based on the first policy and the second policy.

A non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions, when executed by a processor of a first communication device, configuring the first communication device to perform operations comprising:

• transmit, to a second communication device, a first Internet Key Exchange, IKE, Authentication, IKE_AUTH, request;
• receive, from the second communication device, a second IKE_AUTH request;
• transmit, to the second communication device in response to the second IKE_AUTH request, a second IKE_AUTH response;
• and
• receive, from the second communication device, a first IKE_AUTH response as a response to the first IKE_AUTH request,
• wherein the first IKE_AUTH request and/or the second IKE_AUTH response contains a notification indicating a first policy supported by the first communication device for identifying duplicated IKE Security Associations, SAs, and the second IKE_AUTH request and/or the first IKE_AUTH response contains a notification indicating a second policy supported by the second communication device for identifying duplicated IKE SAs, thereby enabling creation of a policy supported by both the first communication device and the second communication device for identifying duplicated IKE SAs based on the first policy and the second policy.