Re: KINK should referenece to IKEv2?
Shoichi Sakane <[email protected]> Thu, 03 Feb 2005 15:04:57 +0900
| Newsgroups | gmane.ietf.kink |
|---|---|
| Message-ID | <[email protected]> |
> >I think the main 2401bis feature is multiple SAs between two > >destinations. Kink actually already has this capability. It may be > >that by changing the text slightly and removing the requirement on > >selecting which SA to use if multiple SAs exist, we can get most > >2401bis functionality. > > 2401 already requires support for multiple SAs between a pair of > peers. What 2401bis adds is a requirement to support these multiple > SAs to have identical selectors, and where we are not just replacing > one SA with a successor. 2401bis requires a system complies 2401bis to handle multiple SAs with same selector, but different "classifier" between same two nodes. it means that it requires a key management protocol to establish multiple SAs somehow. i think that current kink specification can do that.