Re: KINK should referenece to IKEv2?

>>>>> "Michael" == Michael Thomas <[email protected]> writes:

    Michael> So from Steve's last email, I read it as our having met
    Michael> your requirement since IKEv1 can still do its job on
    Michael> 2401bis as well as it did for 2401. 

More or less.  There are issues like the SPD PAD split that need to be
addressed in the document.  Similarly, we need to confirm that the
text added about rekey timeouts does not conflict with kink.  But I do
expect the answer to this question to be yes.

    Michael> A more interesting
    Michael> question is whether there's a way for KINK to easily
    Michael> inherit the new/changed IKEv2 payloads that support the
    Michael> 2401bis features. 

Or whether there is an easy way to get this functionality.  Note this
is not a requirement I have, but I do agree as an individual that it
is at least worth thinking about.

I think the main 2401bis feature is multiple SAs between two
destinations.  Kink actually already has this capability.  It may be
that by changing the text slightly and removing the requirement on
selecting which SA to use if multiple SAs exist, we can get most
2401bis functionality.

--Sam