[IPsec] clarification needed in address assignment using IKEv2 Configuration Payload

2011-04-06 Thread Balaji J
Hi ppl, Recently i have started reading the IKEv2 RFC(5996). I need a clarification on assigning the ip address using ikev2 protocol as below which i couldn't find in the RFC4718: Is it valid to assign 0.0.0.0 IP address in the CFG_REPLY paylaod in IKE_AUTH message to the initiator? I need this i

Re: [IPsec] Queries relating to ESP/AH GCM & GMAC

2011-04-06 Thread Scott Fluhrer (sfluhrer)
From: Vinod Sasi [mailto:vs...@ixiacom.com] Sent: Wednesday, April 06, 2011 2:43 AM To: Scott Fluhrer (sfluhrer); ipsec@ietf.org Subject: RE: [IPsec] Queries relating to ESP/AH GCM & GMAC Hello Scott, Many thanks for your reply; this is helping me to a great extent. Few more cla

Re: [IPsec] RFC 5996: IKEv2 - rekey question about 'equivalent' SA's

2011-04-06 Thread Tina Tsou
Hi Nico, I thought about rekeying problem when the software lifetime expires. If two security gateway to initiate rekeying, what is the additional benefit brought to IKE? We keep our promises with one another - no matter what! Best Regards, Tina TSOU http://tinatsou.weebly.com/contact.html ---