[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Associating newly created SA bundles with Policies



Hello.

The SA bundle was created as a result of IKE negotiations. The host acts
in these negotiations as a responder. Should it associate this bundle
with some policy? 

If the answer to this question - yes:
- If several Policies match this bundle (we can use only IP address as a
selector), it should be associated with all of them? This can cause some
problems (on this host this bundle is associated with multiple policies,
but on the remote host only with single)

If the answer - no:
- The outbound SA will be never used?

Thanks,
Sergey Zakharov