Re: linux-ipsec: initiator/responder

Richard Guy Briggs writes:
> If I understand correctly, Initiator/Responder issues are dealt with
I have seen those terms only at that level.

> In other words, they have nothing to do with the klips-level of SA's?
A Security Association consists only of the three tuple (Destination IP Address,
 Security Parameters Index [SPI],
 Security Protocol: AH or ESP).

Initiator and Responder might have something to do with the direction (destination IP Adress) of the Security Association as negotiated by your key management daemon.

Greetings
 Niels

-- 
- PHYSnet Rechnerverbund     PGP V2.6 Public key via finger or key server
  Niels Provos               
  Universitaet Hamburg       WWW: 
http://www.physnet.uni-hamburg.de/provos/   
  Jungiusstrasse 9           E-Mail: provos@wserver.physnet.uni-hamburg.de
  Germany 20355 Hamburg      Tel.:   +49 40 4123-2404     Fax: -6571