[IPsec] Re: IKEv2 peculiarity
Paul Wouters <paul.wouters@aiven.io> Thu, 19 February 2026 17:51 UTC
Return-Path: <paul.wouters@aiven.io>
X-Original-To: ipsec@mail2.ietf.org
Delivered-To: ipsec@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1314EB9F47F3 for <ipsec@mail2.ietf.org>; Thu, 19 Feb 2026 09:51:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=aiven.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31BhjblUHigb for <ipsec@mail2.ietf.org>; Thu, 19 Feb 2026 09:51:24 -0800 (PST)
Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B514EB9F47EC for <ipsec@ietf.org>; Thu, 19 Feb 2026 09:51:24 -0800 (PST)
Received: by mail-ej1-x635.google.com with SMTP id a640c23a62f3a-b885a18f620so213094166b.3 for <ipsec@ietf.org>; Thu, 19 Feb 2026 09:51:24 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1771523484; cv=none; d=google.com; s=arc-20240605; b=N2+Oprq2NQd/lc+i+EAGxXntHvzF8jCY6im1BWBkx4dexUjyWrRsQHr5m7JQwyuSPz /NS+xB45Dii2KpzGWGvSMmfZAWKMRZIAQwUZARLa9mPGPi6woccc612K9/aHITlHe093 kWW13sqJbQsInQDgrsyy7mj0dpbgZFlu5P6XhUKPjam6Xejj39oDBOR6qpt9K3q5Fvmz D4vgrVZrzMy7Z4yWpbbCA64+XZOGP2zpWvj/nZXZHOP7FT10xATWeH0VfIkTw1aXiXrz AD2YkBo1neeAqJFFe9rLAMlwL7MfWVkn+4HFYgQt1VFK03wH3Mjrw76soRdtSwjg4qqE F3Gg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=; fh=bl7aCHUWDcaKfoqbK1DlopWID4ZPszMwfwr858tc9Fc=; b=Ajn2SCn2wr1msDilAc+B/HDAUqw9Y3JCcrTbNpsjYTvX2M+D0r5RZ81tzekr1To8S4 Ew/V7OWRHpjoZPbydhpEXPtvJHJFCn1ZUk2VsF02u4lw+BsgDoGF33gTdIq0Xpd4izEq tl9bu1sGwqVfyTVIZCcMxQy0LDKdrP277TBEVUoAAzFtSC9AEYhACCooWp0pYCcAeG54 wcrBGcPQr45BgoBCIjLdH7BwOB+xtBJqG9ZP330Q6KhVVJe9ZVn3ySCH382acBeeBJQB tg9FE27ezPdjP5or/d7dGULSPwGyOll9ilwrVw5sRxzrgUpTFgSMEpOiQf5k7lSpKee6 kAjQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aiven.io; s=google; t=1771523484; x=1772128284; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=; b=I6w9jJwpHROyXcdLsaUyMLBJw7LUbIaVJkY7SHUPXgjsHygZiJ8k/6OyyP2i6JogVj sMO6yePGBCZwk6xB6IHVmev5Ozfl1XNkXnnTH7vowoB+qsIPACi12GWe5MYYIxPQXFas ffasHDCvBRjllerpXgCspBNeY2pNh1ikCWVaU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771523484; x=1772128284; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=; b=LKiJEn7cnDXEZVoep08fypga2MAr6kHrIlUVePFLUwzVht7fpiVoiCi03q4sFjljNu RvRP+/oENxNLyBHBrWLpUeGv+aB3lt9uhhC/xmMfdQ18RU+u//GtxOkRTh1d/W1qjWv9 EzMNt+1sNzlq1J+nwblZIYegdIzJmRfu/vR9nZ8u17jcR6vu9Ln9TUX8EAt5NQgJGyaZ cXYjepJbRU5Gh6z2ELmzDCHu9WBlXUHTGASkzynB5rZ9Y1m7XRqVEabIqirMEhjghMJO KBIH2VDuAHyK63PhP4nJRGnQA1ofYvltFbRH8fJayGKoVvrDUgUDwNN0WBvuzSbcdJfH esVA==
X-Gm-Message-State: AOJu0YzEP88w4A605fEpBWG1tUhrEANLx89kuwfqeSfTN0mmeISL11yk l206K7hbXsNtgXPZQQrTcFl9SNXJjHIURy+xbciXwEctTV6NugILTyAdKYU8wtey8N0nJpSWtpk JNHxHVN5xGjdYTE/PRLP/RH+BtJ5bxtmSILcIlZS4kA==
X-Gm-Gg: AZuq6aL49a4yl73/8mWeTKhkwlC4+vd5EVQhAjCjgtBmQEiOax+wsgdn5a1eQHjlz6Z UkYxJ6rd0fllyXJzJb9Ta9XI/I/d1Y77vhFN5xOEX3HoHpN42loNyVpu/Z2ZOa17UkDxkAh5tF5 eIAzF1vNUwgA2JNcVLSnf2N/ICHD1XNL0qbyHJBMY4/AlVRZN0U+6YMeMZ9pLGgKZkhsjqEkHfe HT+wtmhoV77hFE07+RQKV8Y2Ew0+kIsnUjFz12r7DEWpx618klgfu7d7YOoFgMX9br8PAw8shUo bJ8dRcVU+RaJOvkzLHglFQ/PfaJOAfDbrlVb9esVna8rn7DX+6fEXnvpU0UfdQDSlBc4s2s=
X-Received: by 2002:a17:907:9689:b0:b88:5e32:5357 with SMTP id a640c23a62f3a-b8facf989f5mr1299021366b.59.1771523483696; Thu, 19 Feb 2026 09:51:23 -0800 (PST)
MIME-Version: 1.0
References: <CAMEJMGGkbOa8+Cg2+vvODhndpFkvF51-d5Ghrz_VY7BhTRjt_g@mail.gmail.com>
In-Reply-To: <CAMEJMGGkbOa8+Cg2+vvODhndpFkvF51-d5Ghrz_VY7BhTRjt_g@mail.gmail.com>
From: Paul Wouters <paul.wouters@aiven.io>
Date: Thu, 19 Feb 2026 12:51:12 -0500
X-Gm-Features: AaiRm53N3WID1ZcU8WAxLkk23UZR5GCwc2o8td7fchFfIW1qR-vlHHx1cM0yNgU
Message-ID: <CAGL5yWbz4U=hRPC3-FUMTtDuZohuVyBjFejfWm1qw4BxPJ_3MA@mail.gmail.com>
To: Turritopsis Dohrnii Teo En Ming <ceo.teo.en.ming@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000f5228e064b30f34c"
Message-ID-Hash: ADMYTKLSNR2RBUYVMA6JAMDZJBERQOWP
X-Message-ID-Hash: ADMYTKLSNR2RBUYVMA6JAMDZJBERQOWP
X-MailFrom: paul.wouters@aiven.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ipsec.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: ipsec@ietf.org, ceo@teo-en-ming-corp.com
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [IPsec] Re: IKEv2 peculiarity
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/5fYWv4sZkYFkECdGTTrZ7q2DdwI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Owner: <mailto:ipsec-owner@ietf.org>
List-Post: <mailto:ipsec@ietf.org>
List-Subscribe: <mailto:ipsec-join@ietf.org>
List-Unsubscribe: <mailto:ipsec-leave@ietf.org>
On Thu, Feb 19, 2026 at 12:31 PM Turritopsis Dohrnii Teo En Ming < ceo.teo.en.ming@gmail.com> wrote: > Subject: IKEv2 peculiarity > > Good day from Singapore, > > When I wanted to use Email OTP 2FA MFA, IKEv2 doesn't allow it. > What is the relationship between Email OTP 2FA MFA and IKEv2? When I changed from IKEv2 to IKEv1 (main mode, not aggressive), Email > OTP is allowed. > Please clarify "allowed"? Is there another issue that just makes something fail? IKEv2 does not directly control email access. But if IKEv2 failed, perhaps your email server just cannot be reached? Regardless, this seems like a configuration issue and not a protocol issue for this list, as IKEv2 does nothing with or to email protocols. Paul
- [IPsec] IKEv2 peculiarity Turritopsis Dohrnii Teo En Ming
- [IPsec] Re: IKEv2 peculiarity Paul Wouters
- [IPsec] Re: IKEv2 peculiarity Turritopsis Dohrnii Teo En Ming