[IPsec] Just three more issues for IKEv2bis

2010-02-19 Thread Tero Kivinen
Yoav Nir writes: > Hi all. > > There are only three issues this time, because this is the last batch. > > Issue #173 - Trigger packets should not be required > === > In a few places in the new section 2.23.1 in IKEv2bis, it says that one > must ha

Re: [IPsec] IKE6 Negitaion when Peer Address ND not yet started.

2010-02-19 Thread Tero Kivinen
Syed Ajim Hussain writes: >Thanks for your quick response. I think, instead of user takes special >care by adding extra Rule to allow un-encrypted ND traffic(unicast) , >There should be some RFC guidelines, such that IPSEC/IKE protocol itself >can take care. It will be problem i

Re: [IPsec] WG Review: Recharter of IP Security Maintenance and Extensions (ipsecme)

2010-02-19 Thread Jari Arkko
Pasi, (Adding the working group mailing list to the discussion; previous discussion has been at i...@ietf.org.) You're right that implementing a "weak shared secret" EAP method (both the EAP peer and EAP server roles) on both IPsec nodes, combined with the "EAP mutual authentication" work ite

[IPsec] Issue #173 - Trigger packets should not be required

2010-02-19 Thread Paul Hoffman
At 1:10 PM +0200 2/19/10, Tero Kivinen wrote: >Yoav Nir writes: >> Hi all. >> >> There are only three issues this time, because this is the last batch. >> > > Issue #173 - Trigger packets should not be required >> === >> In a few places in the new sec

Re: [IPsec] Issue #173 - Trigger packets should not be required

2010-02-19 Thread Dan McDonald
Am reading this right? On Fri, Feb 19, 2010 at 08:22:51AM -0800, Paul Hoffman wrote: > At 1:10 PM +0200 2/19/10, Tero Kivinen wrote: > >Yoav Nir writes: > >> Hi all. > >> > >> There are only three issues this time, because this is the last batch. > >> > > > Issue #173 - Trigger packets should not