[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SOI QUESTION: 5.3 SPD entries



> Please discuss and answer the following question:
> 
> 5.3 SPD entries
> 
> 5.3.A) Is it important in SOI to allow the the responder to accept a subset 
> of the proposed SA, or should it be an all or nothing acceptance?

All or nothing.

> 5.3.B) Should the SOI offer multiple selectors with specific ports and
> addresses, or a single selector with a range of ports and range of
> addresses?  (complicated boolean complexity!)  

List of ranges.

> Implications from the scenarios:
> 
> <<<In the case of a pair of SGWs fronting multiple non-contiguous
> subnets, a mechanism that allowed the negotiation of a list of phase 2
> identities will help to alleviate the number of IPsec tunnels that must
> be created.>>> [[[5.3]]]
>