the responder keeps connections with initiators in a hash table where the key is ISPI. The issue is that ispi is randomly chosen by initiator so when a second initiator send INIT request with authenticated ispi, the current ispi gets replaced by the new one.