Multicast Security Architecture Changes to ESPv3 and AHv3 are not sufficient RFC 2401bis (or an update to it) needs to reflect the multicast security architecture Current SPD structure does not support multicast Multicast SAs need to use a Group SPD (GSPD) as defined in RFC 3740 Current SAD structure only supports multicast when manually configured |