RE: Is TS agreement necessary?

[Michael Thomas <mat@cisco.com>]

Rajesh Mohan writes:
 > Say, we have this special box made to be used in data centers. We have regular IPSec complaint box in corporate network. It will be convenient for the administrator at data center to tunnel all traffic of a particular VLAN to the corporate network. He does not care what network is at the remote end. On the other end, the corporate administrator has well defined selectors for the tunnel to the cage.
 > 
 > In this unsymmetric setup, having no selectors at IPSec (and a way to negotiate this in IKEv2) is useful.

  Ok, I'm probably in left field here, but what you seem
  to be describing is a completely permissive traffic
  selector, not a lack of one. What's the problem here?

		Mike