[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Outbound SA Bundle processing

Hi,

I have two queries regarding SA Bundle processing. 

1) If we have two SAs in an outbound SA Bundle as below,

     1st SA :  ESP in tunnel mode.
     2nd SA :  AH in tunnel mode.

   What should be the correct format of the packet that is 
   produced after applying these two SAs?

   i)   [IP1][AH][ESP][Original_IP]  

   Or   

   ii)  [IP2][AH][IP1][ESP][Original_IP]  



2) If we have more than two SAs in an outbound SA Bundle as below,

     1st SA :  ESP in tunnel mode, with DES
     2nd SA :  ESP in tunnel mode, with 3DES
     3rd SA :  ESP in tunnel mode, with AES
     4th SA :  AH in tunnel mode.

   What should be the correct format of the packet that is 
   produced after applying these two SAs?


Thanks
suren