[strongSwan] SPD vs proxy-id

Karol Cieśla xcieja at gmail.com
Sat Apr 20 01:24:27 CEST 2013

i have been wondering about two things:

1) in case of input IPSec processing,
   why after checking against SA selectors, packet is checked against SPD ?

2) I have read that proxy-id is used to direct traffic to appropriate SA,
but for the same purpose is SPD used.
What is the difference between SPD (traffic selectors) and proxy-id ?

If you can provide me an example i would be glad,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130420/1c27c30f/attachment.html>

More information about the Users mailing list