#23 [*] KE interoperability (section 6.8)
Shoichi Sakane <[email protected]> Fri, 04 Feb 2005 21:35:47 +0900
| Newsgroups | gmane.ietf.kink |
|---|---|
| Message-ID | <[email protected]> |
> #23 [*] KE interoperability (section 6.8) > > What happens if a peer that implements the KE payloads communicates > with a peer that does not. Specify the behavior in sufficient detail > to guarantee interoperability. (Sam Hartman) my understanding is correct, there is no description in the IKEv1 specifications though it defines the error code which can be used in this case. IKEv2 defines clearly. so if KINK specification complies to IKEv1 manner, we have to define the behavior and describe it for interoperability. if KINK complies to IKEv2 manner, we can probably leave it. another problem comes up. there is no way to negotiate a DH group to use in a quick mode. so in IKEv1, they have to define the DH group before they negotiate. current KINK specification does not touch it. this is no matter in IKEv2. and an initiator can not install the inbound SA when the initiator choices to send KE because KEYMAT is not calculated before the initiator receives KE from the responder. the document has to touch this situation.