[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IPsec -- SPI ranges
Date: Sun, 5 Oct 97 19:27:35 EDT
From: Karen Seo <kseo@BBN.COM>
Norm has raised the question: "I thought there were distinct SPI
ranges for manually and automatically configured SAs."
I found email from Bill Simpson stating that SPI values from
256-65535 are reserved for manual configuration, but the initial
drafts I obtained back in February don't show this.
Is there working group agreement on whether to set aside separate
ranges of SPIs for manual and automated key management? If not,
could you resolve this so we can update the AH/ESP/Arch specs
accordingly?
Hi Karen,
Sorry for the delay in getting back to you. It's been a busy
week, and I haven't had time to do the necessary research until now.
As far as I can tell, there's been no discussion on the IPSEC
working group mailing list to have a separate SPI range for manually
configured SA's.
Some of Bill Simpson's drafts did reserve the SPI ranges from
256-65535 for manual configuration, but none of his drafts which made
such a claim were under formally consideration by the working group, and
to my knowledge I haven't seen any request for this from the working
group. I've cc'ed this message to the ipsec mailing list. If someone
has a very good reason to want this speak up now.
- Ted
Follow-Ups: