Re: is manual keying mandatory (fwd)

Paul Koning <pkoning@xedia.com> Thu, 19 March 1998 16:03 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id LAA18527 for ipsec-outgoing; Thu, 19 Mar 1998 11:03:36 -0500 (EST)
Date: Thu, 19 Mar 1998 11:16:58 -0500
Message-Id: <9803191616.AA00927@kona.>
From: Paul Koning <pkoning@xedia.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: perry@piermont.com
Cc: jhwilson@austin.ibm.com, ipsec@tis.com
Subject: Re: is manual keying mandatory (fwd)
References: <199803190509.XAA26210@jhwilson.austin.ibm.com> <199803191421.JAA04709@jekyll.piermont.com>
X-Mailer: VM 6.34 under 20.3 "Vatican City" XEmacs Lucid
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

>>>>> "Perry" == Perry E Metzger <perry@piermont.com> writes:

 Perry> Jackie Wilson writes:
 >> I agree.  It will be some time before all boxes support ISAKMP,
 >> but they will need to be included in secure networks.  This will
 >> help customers adopt ISAKMP as a standard if it is widely
 >> available.
 >> 
 >> In a few years it could probably be phased out.

 Perry> I would be very against *ever* phasing out support for manual
 Perry> keying.

I agree with Perry.

Consider ARP.  It's been around for decades... but people still
support static ARP entries.

	paul