RE: IPSEC target and transport mode

[Black_David@emc.com]

> Not recently.  Actually, an interesting wrinkle is that a number of
> security gateways don't implement fine grain (per port) SPDs, in spite
> of RFC 2401.  But apart from that it's pretty straightforward.

I actually checked this in the ipsec WG last week.  Something like 2/3
of the security gateway vendors in the room indicated that they do support
the fine grain (per port) selectors in their SPDs, so the support does
exist, but it's not universal.

--David
---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 249-6449 *NEW*      FAX: +1 (508) 497-8500
black_david@emc.com         Cell: +1 (978) 394-7754
---------------------------------------------------