Return-Path: <paul.wouters@aiven.io>
X-Original-To: ipsec@mail2.ietf.org
Delivered-To: ipsec@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id 1314EB9F47F3
	for <ipsec@mail2.ietf.org>; Thu, 19 Feb 2026 09:51:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level: 
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001,
	RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
	autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key)
	header.d=aiven.io
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 31BhjblUHigb for <ipsec@mail2.ietf.org>;
	Thu, 19 Feb 2026 09:51:24 -0800 (PST)
Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com
 [IPv6:2a00:1450:4864:20::635])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id B514EB9F47EC
	for <ipsec@ietf.org>; Thu, 19 Feb 2026 09:51:24 -0800 (PST)
Received: by mail-ej1-x635.google.com with SMTP id
 a640c23a62f3a-b885a18f620so213094166b.3
        for <ipsec@ietf.org>; Thu, 19 Feb 2026 09:51:24 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1771523484; cv=none;
        d=google.com; s=arc-20240605;
        b=N2+Oprq2NQd/lc+i+EAGxXntHvzF8jCY6im1BWBkx4dexUjyWrRsQHr5m7JQwyuSPz
         /NS+xB45Dii2KpzGWGvSMmfZAWKMRZIAQwUZARLa9mPGPi6woccc612K9/aHITlHe093
         kWW13sqJbQsInQDgrsyy7mj0dpbgZFlu5P6XhUKPjam6Xejj39oDBOR6qpt9K3q5Fvmz
         D4vgrVZrzMy7Z4yWpbbCA64+XZOGP2zpWvj/nZXZHOP7FT10xATWeH0VfIkTw1aXiXrz
         AD2YkBo1neeAqJFFe9rLAMlwL7MfWVkn+4HFYgQt1VFK03wH3Mjrw76soRdtSwjg4qqE
         F3Gg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
 s=arc-20240605;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:dkim-signature;
        bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=;
        fh=bl7aCHUWDcaKfoqbK1DlopWID4ZPszMwfwr858tc9Fc=;
        b=Ajn2SCn2wr1msDilAc+B/HDAUqw9Y3JCcrTbNpsjYTvX2M+D0r5RZ81tzekr1To8S4
         Ew/V7OWRHpjoZPbydhpEXPtvJHJFCn1ZUk2VsF02u4lw+BsgDoGF33gTdIq0Xpd4izEq
         tl9bu1sGwqVfyTVIZCcMxQy0LDKdrP277TBEVUoAAzFtSC9AEYhACCooWp0pYCcAeG54
         wcrBGcPQr45BgoBCIjLdH7BwOB+xtBJqG9ZP330Q6KhVVJe9ZVn3ySCH382acBeeBJQB
         tg9FE27ezPdjP5or/d7dGULSPwGyOll9ilwrVw5sRxzrgUpTFgSMEpOiQf5k7lSpKee6
         kAjQ==;
        darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=aiven.io; s=google; t=1771523484; x=1772128284; darn=ietf.org;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=;
        b=I6w9jJwpHROyXcdLsaUyMLBJw7LUbIaVJkY7SHUPXgjsHygZiJ8k/6OyyP2i6JogVj
         sMO6yePGBCZwk6xB6IHVmev5Ozfl1XNkXnnTH7vowoB+qsIPACi12GWe5MYYIxPQXFas
         ffasHDCvBRjllerpXgCspBNeY2pNh1ikCWVaU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1771523484; x=1772128284;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
         :message-id:reply-to;
        bh=F2M5jpDuTm5Z8tgJGozNGLizKZv1o6tvFjzlEI7ECqw=;
        b=LKiJEn7cnDXEZVoep08fypga2MAr6kHrIlUVePFLUwzVht7fpiVoiCi03q4sFjljNu
         RvRP+/oENxNLyBHBrWLpUeGv+aB3lt9uhhC/xmMfdQ18RU+u//GtxOkRTh1d/W1qjWv9
         EzMNt+1sNzlq1J+nwblZIYegdIzJmRfu/vR9nZ8u17jcR6vu9Ln9TUX8EAt5NQgJGyaZ
         cXYjepJbRU5Gh6z2ELmzDCHu9WBlXUHTGASkzynB5rZ9Y1m7XRqVEabIqirMEhjghMJO
         KBIH2VDuAHyK63PhP4nJRGnQA1ofYvltFbRH8fJayGKoVvrDUgUDwNN0WBvuzSbcdJfH
         esVA==
X-Gm-Message-State: AOJu0YzEP88w4A605fEpBWG1tUhrEANLx89kuwfqeSfTN0mmeISL11yk
	l206K7hbXsNtgXPZQQrTcFl9SNXJjHIURy+xbciXwEctTV6NugILTyAdKYU8wtey8N0nJpSWtpk
	JNHxHVN5xGjdYTE/PRLP/RH+BtJ5bxtmSILcIlZS4kA==
X-Gm-Gg: AZuq6aL49a4yl73/8mWeTKhkwlC4+vd5EVQhAjCjgtBmQEiOax+wsgdn5a1eQHjlz6Z
	UkYxJ6rd0fllyXJzJb9Ta9XI/I/d1Y77vhFN5xOEX3HoHpN42loNyVpu/Z2ZOa17UkDxkAh5tF5
	eIAzF1vNUwgA2JNcVLSnf2N/ICHD1XNL0qbyHJBMY4/AlVRZN0U+6YMeMZ9pLGgKZkhsjqEkHfe
	HT+wtmhoV77hFE07+RQKV8Y2Ew0+kIsnUjFz12r7DEWpx618klgfu7d7YOoFgMX9br8PAw8shUo
	bJ8dRcVU+RaJOvkzLHglFQ/PfaJOAfDbrlVb9esVna8rn7DX+6fEXnvpU0UfdQDSlBc4s2s=
X-Received: by 2002:a17:907:9689:b0:b88:5e32:5357 with SMTP id
 a640c23a62f3a-b8facf989f5mr1299021366b.59.1771523483696; Thu, 19 Feb 2026
 09:51:23 -0800 (PST)
MIME-Version: 1.0
References: 
 <CAMEJMGGkbOa8+Cg2+vvODhndpFkvF51-d5Ghrz_VY7BhTRjt_g@mail.gmail.com>
In-Reply-To: 
 <CAMEJMGGkbOa8+Cg2+vvODhndpFkvF51-d5Ghrz_VY7BhTRjt_g@mail.gmail.com>
From: Paul Wouters <paul.wouters@aiven.io>
Date: Thu, 19 Feb 2026 12:51:12 -0500
X-Gm-Features: AaiRm53N3WID1ZcU8WAxLkk23UZR5GCwc2o8td7fchFfIW1qR-vlHHx1cM0yNgU
Message-ID: 
 <CAGL5yWbz4U=hRPC3-FUMTtDuZohuVyBjFejfWm1qw4BxPJ_3MA@mail.gmail.com>
To: Turritopsis Dohrnii Teo En Ming <ceo.teo.en.ming@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000f5228e064b30f34c"
Message-ID-Hash: ADMYTKLSNR2RBUYVMA6JAMDZJBERQOWP
X-Message-ID-Hash: ADMYTKLSNR2RBUYVMA6JAMDZJBERQOWP
X-MailFrom: paul.wouters@aiven.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-ipsec.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: ipsec@ietf.org, ceo@teo-en-ming-corp.com
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BIPsec=5D_Re=3A_IKEv2_peculiarity?=
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ipsec/5fYWv4sZkYFkECdGTTrZ7q2DdwI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Owner: <mailto:ipsec-owner@ietf.org>
List-Post: <mailto:ipsec@ietf.org>
List-Subscribe: <mailto:ipsec-join@ietf.org>
List-Unsubscribe: <mailto:ipsec-leave@ietf.org>

--000000000000f5228e064b30f34c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Thu, Feb 19, 2026 at 12:31=E2=80=AFPM Turritopsis Dohrnii Teo En Ming <
ceo.teo.en.ming@gmail.com> wrote:

> Subject: IKEv2 peculiarity
>
> Good day from Singapore,
>
> When I wanted to use Email OTP 2FA MFA, IKEv2 doesn't allow it.
>

What is the relationship between Email OTP 2FA MFA and IKEv2?

When I changed from IKEv2 to IKEv1 (main mode, not aggressive), Email
> OTP is allowed.
>

Please clarify "allowed"? Is there another issue that just makes something
fail?
IKEv2 does not directly control email access. But if IKEv2 failed, perhaps
your
email server just cannot be reached?

Regardless, this seems like a configuration issue and not a protocol issue
for this list, as IKEv2
does nothing with or to email protocols.

Paul

--000000000000f5228e064b30f34c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><div class=3D"gmail_quote gmail=
_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Feb 19, 202=
6 at 12:31=E2=80=AFPM Turritopsis Dohrnii Teo En Ming &lt;<a href=3D"mailto=
:ceo.teo.en.ming@gmail.com">ceo.teo.en.ming@gmail.com</a>&gt; wrote:<br></d=
iv><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord=
er-left:1px solid rgb(204,204,204);padding-left:1ex">Subject: IKEv2 peculia=
rity<br>
<br>
Good day from Singapore,<br>
<br>
When I wanted to use Email OTP 2FA MFA, IKEv2 doesn&#39;t allow it.<br></bl=
ockquote><div><br></div><div>What is the relationship between Email OTP 2FA=
 MFA=C2=A0and IKEv2?=C2=A0</div><div><br></div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,2=
04);padding-left:1ex">
When I changed from IKEv2 to IKEv1 (main mode, not aggressive), Email<br>
OTP is allowed.<br></blockquote><div><br></div><div>Please clarify &quot;al=
lowed&quot;? Is there another issue that just makes something fail?</div><d=
iv>IKEv2 does not directly control email access. But if IKEv2 failed, perha=
ps your</div><div>email server just cannot be reached?</div><div><br></div>=
<div>Regardless, this seems like a configuration issue and not a protocol i=
ssue for this list, as IKEv2</div><div>does nothing with or to email protoc=
ols.</div><div><br></div><div>Paul</div></div></div>

--000000000000f5228e064b30f34c--

