[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SPI orthogonality



Angelos D. Keromytis writes:
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> 
> I believe this has not been answered (not "officially" anyway): are
> the SPI-spaces for AH and ESP orthogonal or not ? Meaning: are the SAs
> identified by tuples (SPI/Remote Address) or by (SPI/Remote
> Address/Protocol), where Protocol = {AH, ESP} ?
> - -Angelos

The last time I asked this question, it was as a result of
inconsistencies between the IPsec and ISAKMP drafts.  The response was
that the IPsec draft was in error (and would be modified).  SA's are
indexed by SPI/Remote Address/Protocol triplets.


ben





Follow-Ups: References: