[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: IPsec and RSVP



hi derek!

> Derek,
>
> There are two different forms of crypto needed for
> RSVP: a hop-by-hop integrity object and a policy
> object.
true. the policy object can additionally contain a integrity object
(together with the other credentials there).

> IPsec could in theory replace the
> integrity object, but cannot replace the policy
> object. Considering that there is no key
> distribution for the hop-by-hop integrity objects,
> IPsec might not be a bad choice in some
> situations.
>
> 		   Mike