Security Parameters Index: Difference between revisions

Revision as of 16:06, 7 October 2007

Revision as of 17:44, 20 May 2008

Line 1:

The '''Security Parameter Index''' (SPI) is an identification tag added to the header while using [[IPSec]] for tunneling the IP traffic. This tag helps the kernel discern between two traffic streams where different encryption rules and algorithms may be in use.

The SPI (as per RFC 2401) is an essential part of an [[IPSec]] SA ([[Security Association]]) because it enables the receiving system to select the SA under which a received packet will be processed. An SPI has only local significance, since is defined by the creator of the SA; an SPI is generally viewed as an opaque bit string. However, the creator of an SA may interpret the bits in an SPI to facilitate local processing.

{{Compu-stub}}