In IPsec , an SA (Security Association) is uniquely identified by three parameters . Which of the following parameters does not belong to the 3-tuple information?
SPI (Security Parameter Index) → Identifies the SA.
Destination IP Address → Specifies the receiving device.
Security Protocol ID → Indicates whether AH (Authentication Header) or ESP (Encapsulating Security Payload) is used.
A. Key exchange protocol is not part of the SA 3-tuple . It is used during IKE (Internet Key Exchange) but is not part of the SA itself.
???? Reference: Huawei HCIA-Datacom Study Guide, IPsec Security Association and SA Identification.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit