The IPSec pieces - SA SAs (Security Associations) Provides rules that say what to do with packets Map a connection (src:port dest:port) to IPSec settings, such as Authentication method Crypto key Crypto algorithm Sequence number SAs usually negotiated via IKE exchanges.
Copyright 2003, Bri Hatch of Onsight, Inc.
Presented at Real World Linux, 2003.
Presentation created using vim and MagicPoint.