Security Associations (SA)
Used for both the authentication (AH) and confidentiality (ESP)
A one-way relationship between a sender and a receiver that affords security services to the traffic carried on it.
- If a peer relationship is needed, for two-way secure exchange, then two security associations are required.
Security services are afforded to an SA for the use of AH or ESP, but not both.