Traffic selector

As a CHILD_SA initiator, the traffic selector is proposed as follows:

• address range (the source and destination GRE tunnel endpoint address, /32 or /128)

• protocol (GRE)

• port range (0 to 65535)

As a CHILD_SA responder, the system uses the same traffic selector to narrow the selection peer’s proposal.