ipsec

[mark]

hi,

Just a small error I think, in the handbook at 14.10.3.2:

``If a packet leaves from A.B.C.D, and that packet is encapsulating another packet, and it is destined for W.X.Y.Z, then encrypt it, using the necessary security associations.''

``If a packet arrives from W.X.Y.Z, and that packet is encapsulating another packet, and it is destined for A.B.C.D, then encrypt it, using the necessary security associations.''

I think the 2 lines above should read:

``If a packet leaves from A.B.C.D, and that packet is encapsulating another packet, and it is destined for W.X.Y.Z, then encrypt it, using the necessary security associations.''

``If a packet arrives from W.X.Y.Z, and that packet is encapsulating another packet, and it is destined for A.B.C.D, then _decrypt_ it, using the necessary security associations.''

The change makes more sense especially when read with these 2 lines found in the handbook (just before the previous ones):

`If a packet leaves from A.B.C.D, and it is destined for W.X.Y.Z, then >encrypt< it, using the necessary security associations.''

``If a packet arrives from W.X.Y.Z, and it is destined for A.B.C.D, then >decrypt< it, using the necessary security associations.''

Regards
Mark