[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Traffic selectors in IKEv2



I have a couple of questions on the Traffic selectors in IKEv2.

1) Traffic selectors allow a range of addresses. Is the range encompassing all the addresses
    from 0 to 255.255.255.255 valid (similarly for IPv6) ? Nothing in the spec seems to
    preclude it.

2) IKEv2 specifically allows multiple IPsec SAs to co-exist (and be used) for the same traffic
    selector between same endpoints. i would assume that multiple SAs for the selectors specifying
   all the addresses is still possible between the same endpoints. Is that allowed ?

thanks
mohan