Re: SPD

2011-03-28 Thread Stephen Clark
On 03/26/2011 12:00 PM, VANHULLEBUS Yvan wrote: On Fri, Mar 25, 2011 at 12:28:53PM -0400, Stephen Clark wrote: Hi, Hi. If one has multiple entries in the SPD some representing more specific network addresses not to be encrypted and sent over an ipsec tunnel vs more general

Re: SPD

2011-03-26 Thread VANHULLEBUS Yvan
On Fri, Mar 25, 2011 at 12:28:53PM -0400, Stephen Clark wrote: > Hi, Hi. > If one has multiple entries in the SPD some representing more specific > network addresses not to be encrypted and sent over an > ipsec tunnel vs more general networks that would be encrypted would this >

SPD

2011-03-25 Thread Stephen Clark
Hi, If one has multiple entries in the SPD some representing more specific network addresses not to be encrypted and sent over an ipsec tunnel vs more general networks that would be encrypted would this work? In other words say I have a x.x.0.0/16 that should encrypted but in that x.x.0.0