Huawei H12-891_V1.0 Question Answer
Which of the following parameters is not included in an IPsec security association (SA)?
Security parameter index (SPI)
Destination IP address
Security protocol ID (AH or ESP)
Source IP address
An IPsec Security Association (SA) includes the following critical components:
SPI (Security Parameter Index)
Security Protocol (AH or ESP)
Encryption/Authentication algorithms
The Source IP address is not a defining parameter of an SA. SA is unidirectional and identified based on the SPI and destination address.
Exact Extract - Huawei Security Configuration Guide – IPsec Fundamentals:
“An SA is uniquely identified by the SPI, destination IP, and security protocol. The source address is not a determining factor in the SA.”
TESTED 03 Nov 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved