Hi Yoav,another requirement for IPsec HA is to coordinate the use of distinct counters between multiple crypto engines. The problem (and a convenient solution) is described in http://tools.ietf.org/html/draft-ietf-msec-ipsec-group-counter-modes-05
David _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
