Subject: [IPsec] multi-subscriber use of Ipsec

From: Stephen Kent <[email-masked]>
Date: Fri, 13 Jun 2008 10:24:55 -0400

Pasi,

Reading Tero's note from  yesterday I was reminded that we 
specifically introduced the notion of multiple SPDs to accommodate 
this situation. Specificallty, we note that outbound traffic may use 
the (physical or logical) interface via which it was received to 
select the appropriate SPD. This is step 1 of outbound processing, in 
section 5.1 of 4301. This suggests that using the GRE key as a 
logical interface ID (to select an appropriate SPD) would be one way 
to separate traffic for different subscribers, consistent with the 
current architecture.

Steve
_______________________________________________
IPsec mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/ipsec