[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SAD and SPD...



At 12:31 PM 4/15/99 +0530, Unmesh Kulkarni wrote:
>
>Hi All,
>	The role of SPD for inbound packets, explained in the The IPSec
>Architcture document, is not very clear to me. Since the address, SPI and
>the protocol already specify an SA, do we seperately use SPD in this case?

The role of spd in case of inbound processing comes when you have to
crosscheck whether the order and types of SAs which you have applied are
the same as that of specifed in the inbound policy. Inbound SPD is also
looked up to check for the presence of any bypass policy, if the SAlookup
fails for the incoming packet.

-Rohit




>Thanx in advance,
>-Unmesh.
>	 
>
 ##################################################################
 Rohit Aradhya
 Software Engineer
 Motorola (I) Electronics Ltd	  
 TSR Towers, Rajbhavan Road
 Somajiguda, HYDERABAD
 INDIA				Ph #  (040)3308095/96/97 Ext 3060
 ##################################################################


References: