>I can only find a way to define a global SPD using setkey. Is it possible
>to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4?
>If not, are there any plans to add this in the future?
>Is there any reason one wouldn't want to have this?
no. do you want SPD per interface, or IPsec SPI per interface?
anyway, IPsec architecture is not interface-oriented (it lives on top
of IP, and the information on interface is already gone)
so your suggestion does not fit nicely to the current architecture...
why do you want that? like you want to setup a tricky VPN gateway?
itojun
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
