Date: Tue, 03 Jul 2001 08:12:00 +0900 From: Jun-ichiro itojun Hagino <itojun@iijlab.net> To: snap-users@kame.net Cc: "'freebsd-net@freebsd.org'" <freebsd-net@freebsd.org> Subject: Re: (KAME-snap 5064) Can I define a SPD per interface? Message-ID: <20010702231200.F0BF37BC@starfruit.itojun.org> In-Reply-To: mcambria's message of Mon, 02 Jul 2001 17:10:47 -0400. <3A6D367EA1EFD4118C9B00A0C9DD99D7064F5E@rerun.lucentctc.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>I can only find a way to define a global SPD using setkey. Is it possible >to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4? >If not, are there any plans to add this in the future? >Is there any reason one wouldn't want to have this? no. do you want SPD per interface, or IPsec SPI per interface? anyway, IPsec architecture is not interface-oriented (it lives on top of IP, and the information on interface is already gone) so your suggestion does not fit nicely to the current architecture... why do you want that? like you want to setup a tricky VPN gateway? itojun To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010702231200.F0BF37BC>