Re: KINK should referenece to IKEv2?

>>>>> "Michael" == Michael Thomas <[email protected]> writes:

    Michael> Somebody will need to help me (us) here: can IKEv1
    Michael> successfully establish 2401bis SA's? Can IKEv2
    Michael> successfully establish 2401 SA's? I'm _guessing_ that the
    Michael> answer to both is "yes", but the big question is whether
    Michael> there's anything in IKEv2 what is exchanged across the
    Michael> wire to inform the other side whether it's 2401 or
    Michael> 2401bis. If so, we may need a similar mechanism.

My understanding is that 2401bis supports both ikev2 and ikev1.
However 2401bis has SPD entries that cannot be satisfied by ikev1.
I.E.  2401bis allows multiple SAs to exist between the same two peers.  

There are things that ikev2 can negotiate that a pure 2401
implementation would not support.


I believe it would be OK to have an ikev2 implementation that simply
made sure not to do that.


--Sam