[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Traffic selectors in IKEv2
I have a couple of questions on the Traffic selectors in IKEv2.
1) Traffic selectors allow a range of addresses. Is the range encompassing all the addresses
from 0 to 255.255.255.255 valid (similarly for IPv6) ? Nothing in the spec seems to
preclude it.
2) IKEv2 specifically allows multiple IPsec SAs to co-exist (and be used) for the same traffic
selector between same endpoints. i would assume that multiple SAs for the selectors specifying
all the addresses is still possible between the same endpoints. Is that allowed ?
thanks
mohan