Re: [IPsec] How long does an IKEv1 session take to complete?

Additionally it will depend on the round trip time across the network
between the two peers.

Vendors who are selling network boxes that can do a large number of
simultaneous IKE negotiations tend to care more about simultaneous IKE SA
negotiations per second than they do the actual negotiation time of any one
single negotiation.

HTH,
Gregory.

On Wed, Nov 18, 2009 at 8:27 AM, Dan McDonald <danmcd@sun.com> wrote:

> On Tue, Nov 17, 2009 at 11:31:45PM -0700, hyla81420@mypacks.net wrote:
> <SNIP!>
>
> > Greetings. Is there any data out there that quantifies how long a typical
> > IKEv1 session (main mode and/or aggressive mode) take to complete?
>
> I don't think anyone's done a thorough survey of implementations or
> parameters they use.  If anyone has, or knows of such a survey, they should
> really share with this list.
>
> A LOT depends on what you use for your Oakley Group, your authentication
> method (and the certificate key size in the case of certificates), and, of
> course, the hardware upon which you run it.  There's a lot of combinations
> there!
>
> Dan
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec
>

-- 
----
IETF related email from
Gregory M. Lebovitz
Juniper Networks