[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Q] SA lookup on receive



Hi all,

When an ipsec packet is received, an SA is looked up using the
tuple <dest-ip,spi,protocol>. Must the dest-ip be a local ip
address of the security gateway? What if the dest-ip address is
the address of an internal host?

Thanks,
Abbie.
begin:          vcard
fn:             Abraham Matthews
n:              Matthews;Abraham
org:            CoSine Communications
adr:            Suite 200;;1070 Sixth Avenue;Belmont;CA;94002;USA
email;internet: amatthews@cosinecom.com
title:          Software Architect
tel;work:       650-637-4725
tel;fax:        650-637-4778
x-mozilla-cpt:  ;0
x-mozilla-html: TRUE
version:        2.1
end:            vcard


Follow-Ups: