[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: SIPP and SKIP. 2 subjects.
Ashar,
I'm a bit confused by the comments about SAIDs being reserved
to indicate a particular key exchange. The idea of an SAID is that it
is selected by the local IPSP entity (IPSPE?) for use as the SOLE
selector for security transformation processing for incoming packets.
(This ignores multicast security associations for the moment.
Multicast SAIDs will reuqire more than purely local selection, as they
need to be unqiue across all multicast recipients.) Assuming that an
IPSPE uses the same key management technique for multiple SAs, then it
cannot use the same SAID to identify all of these SAs. It may elect
to encode info about the key management technique in these SAIDs,
since any structure is purely a local matter, but it cannot use the
same SAID for multiple, distinct SAs.
Was the focus of this discussion the use of SAIDs for the SA
negotiation packets? I don't think we have talked about how the
packets exchanged for SA negotiation are handled, so far, e.g. what
protocol ID is appropriate for them, how are they "bypassed" through
the IPSP layer, etc.
Steve
References: