Re: Re: Re: [ssm] SSM with IPSec

[Toerless Eckert <eckert@cisco.com>]

On Wed, Jan 15, 2003 at 02:28:20PM -0800, Mark Baugher wrote:
> When the security association is pushed down to the member by key 
> management, there will need to be a flag that declares whether it is 
> indexed with the source address (SSM) or not (ASM), i.e. whether multiple 
> sources will share that SA.  We might be able to leave it at this level 
> without explicitly declaring it to be ASM or SSM to IPsec.  In fact, this 
> would allow ASM groups to be indexed by source address (a separate SA for 
> each sender) or SSM to not be indexed by source address (one SA for 
> multiple channels).  Whether this makes sense or not is a matter of policy 
> that is implemented in the key server.

Right, that sounds good. 

_______________________________________________
ssm mailing list
ssm@ietf.org
https://www1.ietf.org/mailman/listinfo/ssm