Data origin authentication on IPsec

[ciscoforum]

Does anybody know that data origin authentication only occurs on IKE phase 1 when establish the SA for exchange key or also happens during the IKE phase 2 when establish SA for data transfering? I think it only needs at phase 1 since it is to authenticate the two peers.

Thanks

[drolemc]

Yes, that's true . For more information on the topic kindly follow the url,

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7b1.html