It's associated per-peer, so it assures a cryptographic mapping between src ip and public key.