I-D Action: draft-mglt-ipsecme-clone-ike-sa-03.txt

internet-drafts@ietf.org Mon, 19 January 2015 12:45 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-mglt-ipsecme-clone-ike-sa-03.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20150119124534.6090.71020.idtracker@ietfa.amsl.com>
Date: Mon, 19 Jan 2015 04:45:34 -0800
Archived-At: <http://mailarchive.ietf.org/arch/msg/i-d-announce/F2-A6mlt6nO2oC0vLayv5uKhVMI>
Reply-To: internet-drafts@ietf.org

A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : Clone IKE SA Extension
        Authors         : Daniel Migault
                          Valery Smyslov
	Filename        : draft-mglt-ipsecme-clone-ike-sa-03.txt
	Pages           : 15
	Date            : 2015-01-19

Abstract:
   This document considers a VPN End User setting a VPN with a security
   gateway where at least one of the peers has multiple interfaces.

   With the current IKEv2 protocol, the outer IP addresses of the VPN
   are determined by those used by IKEv2 SA.  As a result using multiple
   interfaces requires to set up an IKEv2 SA on each interface, or on
   each paths if both the VPN Client and the security gateway have
   multiple interfaces.  Setting each IKEv2 SA involves authentications
   which might require multiple round trips as well as activity from the
   VPN User and thus would delay the VPN establishment.  In addition
   multiple authentications unnecessarily increase the load on the VPN
   client and the authentication infrastructure.

   This document presents the Clone IKE SA extension, where an
   additional IKEv2 SA is derived from an existing IKEv2 SA.  The newly
   created IKEv2 SA is set without the IKEv2 authentication exchange.
   The newly created IKEv2 SA can later be assigned to another interface
   using MOBIKE protocol.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-mglt-ipsecme-clone-ike-sa/

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-mglt-ipsecme-clone-ike-sa-03

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-mglt-ipsecme-clone-ike-sa-03


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

I-D Action: draft-mglt-ipsecme-clone-ike-sa-03.txt internet-drafts