Manish Kumar (manishkr) <[email protected]> wrote: > NHRP is used to resolve the remote peer which serves/owns the address > we're > interested in. The information in this resolution culminates in the > creation of > SPD.
I think your description is not quite precise enough for SK; so I want to restate this for the list, even though we discussed this at the meeting. The result of the NHRP (which runs inside the GRE/IPsec tunnels) creates a new GRE/IPsec SPD to connect the spokes that have the remote peers. The SPD that gets created does not mention the remote peers, that part is done in the routing algorithm. -- Michael Richardson <[email protected]>, Sandelman Software Works
pgpjpNRnmyo6i.pgp
Description: PGP signature
_______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
