IPsec DOI v7 - comment

Ben Rogers <ben@Ascend.COM> Sun, 08 March 1998 01:58 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id UAA16008 for ipsec-outgoing; Sat, 7 Mar 1998 20:58:27 -0500 (EST)
Date: Sat, 07 Mar 1998 21:10:57 -0500
Message-Id: <199803080210.VAA01968@carp.morningstar.com>
From: Ben Rogers <ben@Ascend.COM>
To: "Elfed T. Weaver" <weaver@hydra.dra.hmg.gb>
Cc: ipsec@tis.com, ddp@network-alchemy.com
Subject: IPsec DOI v7 - comment
In-Reply-To: <199803051226.HAA07188@relay.rv.tis.com>
References: <199803051226.HAA07188@relay.rv.tis.com>
Reply-To: ben@Ascend.COM
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

Elfed T. Weaver writes:

> Protocol ID              Value
> RESERVED                0
> PROTO-ISAKMP        1
> PROTO-IPSEC-AH      2
> PROTO-IPSEC-ESP     3
> PROTO-IPCOMP         4
> 
> Q. When is it possible to negotiate a PROTO-ISAKMP SA AND 
> PROTO-IPSEC-* SA "at the same time" 
> 
> 
> Is it not the case that :
> PROTO-ISAKMP is negotiated in phase 1 ONLY and
> PROTO-IPSEC-*  negotiated in phase 2 ONLY

Or alternatively that the IKE draft provides (in addition to a generic
Key Exchange method) a phase 1 DOI?  It would be nice if we could
(perhaps for IPsecond) sit down and clean up these drafts, splitting the
IKE draft into logically unrelated IKE and Oakley-DOI documents.

ben

IPsec DOI v7 - comment Elfed T. Weaver
Re: IPsec DOI v7 - comment Derrell D. Piper
IPsec DOI v7 - comment Ben Rogers