On 18.12.2012 19:04, jegathesh malaiyappan wrote:
Hi,

I need a clarification on IKEv2 traffic narrowing.

NodeA
-------------------------------------------------------------------- SGW

Responder initiator& responder

60.60.60.1 - 60.60.60.254   ---- 24
                                          60.60.60.1 - 60.60.63.254
------ 22

Both the peers are configured , support different address range. It has
to narrowing the traffic and decide traffic selector.


Please clarify me the following,

       i) is it always narrow to smaller subnet and use that address
range ... in the above ex ... 60.60.60.0/24 ?

The narrowing happens always to the smaller network, i.e 60.60.60.0/24

       ii) is this traffic narrowing differ based on responder
configured bigger network and initiator configured smaller network?

If the initiator suggests a smaller network then this is selected.
No "broadening" ever happesn.


Thanks.


--
By
Jegathesh,

Regards

Andreas

======================================================================
Andreas Steffen                         [email protected]
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Dev mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/dev

Reply via email to