IPSP? Requirements?
“Policy” for IPSEC nodes
- end hosts
- security gateways
Key management (IKE) isn’t policy
IPSP is framework for managing IPSEC policy
- how do I use IPSEC to communicate with another node?
- is it possible to create SA that conforms to policy?
- what should the SA parameters be?