[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Sharing SAs in the multi-sender environment
I had the same question and I believe you are talking about
sharing both IKE and IPSec SAs. I believe they could be
useful not only if the administrative domain spans several
but even just one security or administrative domain.
gautam
-----Original Message-----
From: juha.ollila@nokia.com [mailto:juha.ollila@nokia.com]
Sent: Wednesday, February 14, 2001 3:46 AM
To: ipsec@lists.tislabs.com
Subject: Sharing SAs in the multi-sender environment
Hello!
Is there any standardized or non-standardized way to share a single SA in
the multi-sender environment? There are some problems (e.g. lack of
anti-replay protection) with sharing SAs between several senders, but
sharing SAs could be useful if there are several security gateways in the
same security or administrative domain. Is there any problem with sharing a
single SA between several receivers? Would someone help me with this issue?
Thanks in advance.
/Juha