RE: NAT Traversal

[Henry Spencer <henry@spsystems.net>]

On Mon, 4 Mar 2002, Chinna N.R. Pellacuru wrote:
> SPI is an IPsec parameter as opposed to IKE. In almost all implementations
> the SPI space is managed by the IPsec implementation (if we divide IPsec
> into IPsec implementation and IKE).

Note that not all implementations support such a division.  Some use the
IKE daemon for general IPsec policy/management as well, in which case it
may be assigning the SPIs. 

                                                          Henry Spencer
                                                       henry@spsystems.net