SPI Value in phase 2

Ayush_paloalto — Sun, 14 Jul 2019 20:44:29 GMT

I wanted to know that I could see the SPI value in the wireshark in site to site policy based VPN.

So basically in base two there are two SPI value inbound and outbound, so if the attacker is capturing my traffic then he'd able to see my SPI value. that can be used by him to decrypt the traffic?

Could you please explain why and how SPI are sent in the clear text in the ESP packet?

Re: SPI Value in phase 2

9t89m8fu — Wed, 17 Jul 2019 13:52:59 GMT

This is mandated by RFC 4303

topic Re: SPI Value in phase 2 in General Topics

SPI Value in phase 2

Re: SPI Value in phase 2