Security Associations

• Uniquely identified by:

• Destination IP address – address of the destination endpoint of the SA (end user system or firewall/router)

• Security protocol – whether association is AH or ESP. Defines key size, lifetime and crypto algorithms (transforms)

• Security parameter index (SPI) – bit string that provides the receiving device with info on how to process the incoming traffic