Re: [Remote access]: Find the right SA on outbound processing

[Antonio Forzieri <antonio.forzieri@xxxxxxxxxx>]

Antonio Forzieri ha scritto:
[...]
> [outer d_addr/inner d_addr/SPI/proto] (SA's specific material)
> 1 - [HOSTA /192.168.10.1/SPI_A/ ESP ] (SA's specific material)
> 2 - [SGW   /    SGW     /SPI_B/ ESP ] (SA's specific material)
> 3 - [HOSTB /192.168.10.2/SPI_C/ ESP ] (SA's specific material)
> 4 - [SGW   /    SGW     /SPI_D/ ESP ] (SA's specific material)
There is a mistake on SA #2 and #4...

[outer d_addr/inner d_addr/SPI/proto] (SA's specific material)
1 - [HOSTA /192.168.10.1/SPI_A/ ESP ] (SA's specific material)
2 - [SGW   /    ANY     /SPI_B/ ESP ] (SA's specific material)
3 - [HOSTB /192.168.10.2/SPI_C/ ESP ] (SA's specific material)
4 - [SGW   /    ANY     /SPI_D/ ESP ] (SA's specific material)

This should work... even if on inbound SA this change is not needed.



--
------------------------------------------------
Antonio Forzieri
CEFRIEL - Politecnico di Milano
Tesista Area E-Service Tecnologies
Tel: 02-23954.334 - email: forzieri@xxxxxxxxxx
------------------------------------------------