[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Q] SA lookup on receive
Hi all,
When an ipsec packet is received, an SA is looked up using the
tuple <dest-ip,spi,protocol>. Must the dest-ip be a local ip
address of the security gateway? What if the dest-ip address is
the address of an internal host?
Thanks,
Abbie.
begin: vcard
fn: Abraham Matthews
n: Matthews;Abraham
org: CoSine Communications
adr: Suite 200;;1070 Sixth Avenue;Belmont;CA;94002;USA
email;internet: amatthews@cosinecom.com
title: Software Architect
tel;work: 650-637-4725
tel;fax: 650-637-4778
x-mozilla-cpt: ;0
x-mozilla-html: TRUE
version: 2.1
end: vcard
Follow-Ups: