thanks lot for your clarification...<br><br><div class="gmail_quote">On Tue, Dec 18, 2012 at 11:43 PM, Andreas Steffen <span dir="ltr"><<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 18.12.2012 19:04, jegathesh malaiyappan wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
<br>
I need a clarification on IKEv2 traffic narrowing.<br>
<br>
NodeA<br>
------------------------------<u></u>------------------------------<u></u>-------- SGW<br>
<br>
Responder initiator& responder<br>
<br>
60.60.60.1 - 60.60.60.254   ---- 24<br>
                                          60.60.60.1 - 60.60.63.254<br>
------ 22<br>
<br>
Both the peers are configured , support different address range. It has<br>
to narrowing the traffic and decide traffic selector.<br>
<br>
<br>
Please clarify me the following,<br>
<br>
       i) is it always narrow to smaller subnet and use that address<br>
range ... in the above ex ... <a href="http://60.60.60.0/24" target="_blank">60.60.60.0/24</a> ?<br>
<br>
</blockquote></div>
The narrowing happens always to the smaller network, i.e <a href="http://60.60.60.0/24" target="_blank">60.60.60.0/24</a><div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
       ii) is this traffic narrowing differ based on responder<br>
configured bigger network and initiator configured smaller network?<br>
<br>
</blockquote></div>
If the initiator suggests a smaller network then this is selected.<br>
No "broadening" ever happesn.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Thanks.<br>
<br>
<br>
--<br>
By<br>
Jegathesh,<br>
</blockquote>
<br>
Regards<br>
<br>
Andreas<br>
<br>
==============================<u></u>==============================<u></u>==========<br>
Andreas Steffen                         <a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a><br>
strongSwan - the Linux VPN Solution!                <a href="http://www.strongswan.org" target="_blank">www.strongswan.org</a><br>
Institute for Internet Technologies and Applications<br>
University of Applied Sciences Rapperswil<br>
CH-8640 Rapperswil (Switzerland)<br>
==============================<u></u>=============================[<u></u>ITA-HSR]==<br>
<br>
</blockquote></div><br><br>