[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IP comression - Can this be made optional?

To: Pyda Srisuresh <suresh@livingston.com>
Subject: Re: IP comression - Can this be made optional?
From: Henry Spencer <henry@spsystems.net>
Date: Wed, 2 Sep 1998 22:11:26 -0400 (EDT)
cc: ipsec@tis.com
In-Reply-To: <199809022052.NAA04417@kc.livingston.com>
Sender: owner-ipsec@ex.tis.com

> > No, an SA bundle is unidirectional, just like the SAs themselves.  In
> > principle, the set of SAs connecting two systems could be asymmetric...
> 
> Are you refering to setting up asymetric SAs without the aid of IKE?

Yes, either by hand or using a different key-exchange protocol (there are
several).  IKE has no provision for negotiating asymmetric connections
(unless I've misremembered something), but the basic IPSEC architecture
permits them. 

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)

References:

Re: IP comression - Can this be made optional?

From: suresh@livingston.com (Pyda Srisuresh)

Prev by Date: Re: IP compression of entire datagram
Next by Date: la Impact of Minimum MTU on Encrypted Packets
Prev by thread: Re: IP comression - Can this be made optional?
Next by thread: la Impact of Minimum MTU on Encrypted Packets
Index(es):
- Main
- Thread