Does anybody know that data origin authentication only occurs on IKE phase 1 when establish the SA for exchange key or also happens during the IKE phase 2 when establish SA for data transfering? I think it only needs at phase 1 since it is to authenticate the two peers.
Thanks