[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SA granularity



>>>>> On Thu, 3 Oct 2002 09:47:10 -0700 (PDT), SatishK Amara <kumar_amara@yahoo.com> said:

>> 2) Could receiver, dynamically, forces (or almost
>> indicate) to the sender about the policy of mapping
>> (e.g. force sender to use different SAs for
>> different TCP connections)?

SatishK> No, may be in IKEv2

Though you can drop packets from the sender if they do the wrong
thing, in your eyes (ie, use the wrong SA which doesn't meet your
policy requirements).

-- 
Wes Hardaker
Network Associates Laboratories