Joel M. Halpern <[email protected]> wrote:
    > LAGs can balance IPSec because the SPI is cafefully placed in the same
    > location as the UDP / TCP port numbers, so if the LAG recognizes the 
protocol
    > type (which most do), it can use the SPI just teh way it uses the port
    > numbers.

Yes, I thought as much, but since only a single SA would be negotiated, as
long as the SPI# remains the same, then it would hash the same.

    > Yes, it is a hack.  It is an OLD hack.

:-)
Those are the best.


--
Michael Richardson <[email protected]>, Sandelman Software Works
 -= IPv6 IoT consulting =-



Attachment: signature.asc
Description: PGP signature

_______________________________________________
Anima mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/anima

Reply via email to