From: Timo T. <tim...@ik...> - 2009-12-18 09:39:26
|
Naveen BN wrote: > Thank you for your solutions for adding public IP address. > From where will the Ipsec layer read the ip address to add to outer IP > header , as per my knowledge it > should be from sa policy. Please correct me Yes, from the SPD. For tunnel mode you have the source and destination netmasks which get encapsulated inside ESP or AH, and additionally the end-point addresses which are the outer IP header addresses. You probably need to update the SPD rule dynamically when your public IP changes. - Timo |