|
Hi Everybody,
I am a PhD student in DePaul University, Chicago doing research in IPSec. I need clarification about the operation of SPD lookup for outbound packets. First question, it's not clear how an SA bundle is formed, and if all SAs in the bundle get the same SPI. Is it constructed by matching an outbound packet against multiple SPD rules each pointing to one transform, or matching the packet against one rule that points to multipe transforms? Second question is about outbound packet matching. Can a packet match multiple SPD rules? If yes, how are these rules applied to the packet in such a case? Any cooperation is highly
appreciated. -Hazem |
_______________________________________________ Ipsec mailing list Ipsec@ietf.org https://www1.ietf.org/mailman/listinfo/ipsec