Subject: Re: [Ipsec] IPv6 Configuration in IKEv2

From: Kimihiro OHKI <[email-masked]>
Date: Mon, 03 Jul 2006 21:12:00 +0900

Stephen Kent wrote:
> At 10:32 AM +0900 6/30/06, Kimihiro OHKI wrote:
>>> ...
>>
>> Actually my confusion on this whole discussion might be, it was not 
>> clear for me how the negotiation of configuration payloads / traffic 
>> selectors affects its SPD or routing to the "interface".
>> It seems, it is clearly defined that the negotiation of traffic 
>> selectors affects its SPD, on the other hand actual IPsec 
>> implementations may need to take care of any other details such as the 
>> difference between "SPD" and "interface" for the interoperability.
>>
>> Best Regards,
>> Kimihiro Ohki
> 
> the SPD is not modified by IKE negotiation of traffic selectors.  The 
> SPD controls the traffic selector negotiation process.  The SAD entry 
> and SPD cache entry created for an SA are affected by the IKE negotiation.

Thanks for your comment.

Well, 'the negotiation of traffic selectors affects its SPD "(cache) 
entries"' seems to be more correct statement.

Best Regards,
Kimihiro Ohki

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec