From owner-freebsd-net Mon Jul 2 19:37: 7 2001 Delivered-To: freebsd-net@freebsd.org Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by hub.freebsd.org (Postfix) with ESMTP id 4F2C537B405 for ; Mon, 2 Jul 2001 19:37:05 -0700 (PDT) (envelope-from larse@ISI.EDU) Received: from isi.edu (hbo.isi.edu [128.9.160.75]) by boreas.isi.edu (8.11.2/8.11.2) with ESMTP id f632axG25942; Mon, 2 Jul 2001 19:36:59 -0700 (PDT) Message-ID: <3B412FCB.4070609@isi.edu> Date: Mon, 02 Jul 2001 19:36:59 -0700 From: Lars Eggert User-Agent: Mozilla/5.0 (X11; U; FreeBSD 4.2-RELEASE i386; en-US; rv:0.9) Gecko/20010529 X-Accept-Language: en, de MIME-Version: 1.0 To: snap-users@kame.net Cc: "'freebsd-net@freebsd.org'" Subject: Re: (KAME-snap 5064) Can I define a SPD per interface? References: <3A6D367EA1EFD4118C9B00A0C9DD99D7064F5E@rerun.lucentctc.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Cambria, Mike wrote: > I can only find a way to define a global SPD using setkey. Is it possible > to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4? Don't your interfaces have different source addresses that you can match on? Lars -- Lars Eggert Information Sciences Institute http://www.isi.edu/larse/ University of Southern California To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message