This tutorial explains what IPsec security associations (SAs) are. It shows that SAs store the parameters needed to encrypt and authenticate IPsec packets flowing from a sender to a receiver. Both sender and receiver use a Security Parameter Index (SPI) to identify which parameters belong to which association. The SPI is included in each IPsec packet.
