Subject: Re: [Ipsec] Multiple Seperate IPSec Contexts

From: "Srinivasa Rao Addepalli" <[email-masked]>
Date: Tue, 11 Jan 2005 12:33:23 -0800

-----Original Message-----
From: [email-masked] [mailto:[email-masked]] On Behalf Of
Subha Venkataramanan
Sent: Tuesday, January 11, 2005 11:55 AM
To: subha; [email-masked]
Subject: Re: [Ipsec] Multiple Seperate IPSec Contexts

Hi,

Maybe my initial mail was not clear. I am re-sending 
it with more information.

Draft 2401-bis, talks about the following in Section
4.4.

It states 'To this end, if supported by the key 
management protocolin use, context identifiers MAY be 
conveyed from Initiator to Responder in the signalling
messages, with the result that the IPsec SAs are 
created with a binding to a particular context'

This does not address the scenario, where when we are 
acting as a Responder,how do we make the peer send 
some IPsec context info, so that internally we
know which context to use.

Is there any draft that talks about this ?

SRINI> I am not aware of any defined mechanism in IKEv2 to identify the
IPsec context. One way to do this is to define public IP address for each
IPsec context i.e as many public IP addresses as number of IPsec contexts.
Based on the 'destination IP' address of incoming IKE message, appropriate
IPsec context can be determined.

Thanks,
Subha

--- subha <[email-masked]> wrote:

> Hi List-members,
> 
> Is there a draft or RFC that indicates how to send
> Context Identifiers
> and receive Context Identifiers in IKE payload ?
> 
> Basically, when acting as a responder, how do we get
> this context identifier
> from the peer, to internally determine, which IPsec
> context to use ?
> 
> Thanks,
> Subha
> 
> 
> 
> _______________________________________________
> Ipsec mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/ipsec
> 

		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - You care about security. So do we. 
http://promotions.yahoo.com/new_mail

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec