Re: Is tunnel IP address...

"Scott G. Kelly" <scott@fet.com> Fri, 29 August 1997 16:21 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id MAA10136 for ipsec-outgoing; Fri, 29 Aug 1997 12:21:59 -0400 (EDT)
Message-ID: <3406F93E.74F6@fet.com>
Date: Fri, 29 Aug 1997 09:30:54 -0700
From: "Scott G. Kelly" <scott@fet.com>
Organization: Furukawa Electric Technologies, Inc.
X-Mailer: Mozilla 3.03 (Win95; U)
MIME-Version: 1.0
To: ipsec@tis.com
Subject: Re: Is tunnel IP address...
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

Ran Atkinson wrote:
> 
> --- On Fri, 29 Aug 1997 12:16:52 +0900  Motonori Shindo <mshindo@ascend.co.jp> wrote:
> 
> > There seems to be several ways to find the tunnel IP address for a
> > particular destination IP address.

<SNIP...>

> How does the Tunnel IP address get into the SA in the first place ?
> It seems like one MUST resolve it _before_ putting it into the SA.
> 
> Ran
> rja@inet.org

I'm guessing that he (Shindo) doesn't really mean the SA - I think he
means the database entry used to *construct* the SA. The last
architecture document refers to the proxy ip address in this SPD entry,
and that's what you can use to differentiate SA requirements in this
situation.

Re: Is tunnel IP address... Scott G. Kelly