Subject: [Ipsec] How IPSEC tunnel mode works with dynamic route changes in security gateways

From: "M.Chenna kesava Reddy" <[email-masked]>
Date: Wed, 08 Sep 2004 14:22:31 +0530

Hi,

I think with some vendor implementations they are binding
 the crypto to particular interface and will configure the
access control list to deny and bypass traffic.
If suppose the security gateway has more than one public
interfaces ex: eth1 and eth2, say ike is negotiated with the
peer which is  connected to eth1 interface, say after some
there is a path change due to dynamic route change because
of some router in the path has gone down or metric change.
will the SA negotiated on eth1 is invalidated and new SA
is negotiated by ike between eth2 and peer gateway or not?
how it ipsec tunnel mode works with dynamic route changes ?

Thx in advance
mcreddy

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec