IKEv2
Click on the red underlined text to get to the source
... IKEv1 in this document) and is now
superseded by [RFC4306] (called IKEv2; see also [RFC4718]). There
are several differences between them. The differences relevant to
...
...
2. [RFC4301] assumes IKEv2, as some of the new features cannot be
negotiated using IKEv1. It is valid ...
... security architecture.
IKEv2 supports features useful for configuring and securing tunnels
not present with IKEv1 ...
... password.
2. IKEv2 supports dynamic address configuration, which may be used
to configure the IPv6 address ...
... architectures, but the negotiation is integrated
with IKEv2.
For the purposes of this document, where the confidentiality ...
... IPV4-TEP2,
and protocol value 41 as phase 2 identities. With IKEv2, the traffic
selectors are used to carry the same information.
...
... RFC4306]. This is defined in
[RFC4301] and hence relevant only when used with IKEv2.
As there is currently no defined way to discover the PAD ...
...
o The Identity of the peer asserted in the IKEv2 exchange: Many
different types of identities can be used. At least, the IPv4
address of the peer should be supported.
...
... IPv4
address of the peer should be supported.
o IKEv2 can authenticate the peer by several methods. Pre-shared
key ...
... establishing the IPsec SAs. IKEv2 should be used where supported and
available; if not, IKEv1 may be used instead.
...
...
Either IKEv1 or IKEv2 provides a secure signaling protocol for
establishing, maintaining, and deleting an IPsec ...
... Eronen, P. and P. Hoffman, "IKEv2 Clarifications and Implementation Guidelines", RFC 4718, October 2006. ...
... IPV6-EP1 and IPV6-TEP2
as phase 2 identities. With IKEv2, the traffic selectors are used to
carry the same information.
...
...
With the exchange of protected configuration payloads, IKEv2 is able
to provide the IKEv2 peer with Dynamic Host Configuration Protocol ...
... payloads, IKEv2 is able
to provide the IKEv2 peer with Dynamic Host Configuration Protocol
(DHCP ...
... payloads. These configuration payloads are
exchanged between the IKEv2 initiator and responder.
...
... be desirable. MOBIKE [RFC4555] provides a solution when IKEv2 is
used, but it only supports tunnel mode.
...