[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SPI orthogonality
Angelos D. Keromytis writes:
> -----BEGIN PGP SIGNED MESSAGE-----
>
>
> I believe this has not been answered (not "officially" anyway): are
> the SPI-spaces for AH and ESP orthogonal or not ? Meaning: are the SAs
> identified by tuples (SPI/Remote Address) or by (SPI/Remote
> Address/Protocol), where Protocol = {AH, ESP} ?
> - -Angelos
The last time I asked this question, it was as a result of
inconsistencies between the IPsec and ISAKMP drafts. The response was
that the IPsec draft was in error (and would be modified). SA's are
indexed by SPI/Remote Address/Protocol triplets.
ben
Follow-Ups:
References: