IPSP Problem Space
IPSP nodes can be anything that runs IPSEC
- remote mobile host
- security gateway
- etc
Decentralized, heterogeneous administration
- two nodes might not trust common administrator
SA parameters not specified in advance
Need common language for resolving policies
Complex administration
- remote administration & delegation