Sankar >By SA's here you mean IKE SA of IPSec SAs? >I do not have a problem creating separate IPSec SA's for these >pair of hosts. However to create the IPSec SA, I need to use >a key exchange protocol like IKE and I was concerned >about the creation of the IKE SA. I was referring to IPsec transit traffic SAs. Steve