Hi All, The role of SPD for inbound packets, explained in the The IPSec Architcture document, is not very clear to me. Since the address, SPI and the protocol already specify an SA, do we seperately use SPD in this case? Thanx in advance, -Unmesh.