next up previous
Next: 4.8.2 008: response Up: 4.8 008: decouple SA Previous: 4.8 008: decouple SA

4.8.1 008: Definition of requirement

The desire is that the SA lookup by SPI should not depend upon destination address. This is in contradiction to IPsec requirements, but an implementation that assigns unique SPI numbers to all protocols can satisfy both requirements.

This requirement also helps NAT traversal in some cases.

Michael Richardson