(racoon2 62) [Fwd: BOUNCE [email protected]: Non-member submission from [Franck GILLET <[email protected]>]]

This is a multi-part message in MIME format.
--------------040102050601020708090207
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit


--------------040102050601020708090207
Content-Type: message/rfc822;
 name="BOUNCE [email protected]:    Non-member submission from [Franck GILLET<[email protected]>]"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="BOUNCE [email protected]:    Non-member submission from [Franck GILLET<[email protected]>]"

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: by mama.tanu.org (Postfix, from userid 1003)
	id 3C5F11A7C48; Thu, 16 Mar 2006 19:07:18 +0900 (JST)
Received: from orange.kame.net (orange.kame.net [203.178.141.194])
	by mama.tanu.org (Postfix) with ESMTP id D4BD41A7BAA
	for <[email protected]>; Thu, 16 Mar 2006 19:07:17 +0900 (JST)
Received: by orange.kame.net (Postfix)
	id 5A037356727; Thu, 16 Mar 2006 19:07:17 +0900 (JST)
Delivered-To: [email protected]
Received: by orange.kame.net (Postfix, from userid 54)
	id 3E231356A92; Thu, 16 Mar 2006 19:07:17 +0900 (JST)
To: [email protected]
From: [email protected]
Subject: BOUNCE [email protected]:    Non-member submission from [Franck GILLET <[email protected]>]   
Message-Id: <[email protected]>
Date: Thu, 16 Mar 2006 19:07:17 +0900 (JST)

From [email protected]  Thu Mar 16 19:07:16 2006
Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from sardine.kame.net (sardine.kame.net [2001:200:0:8002:210:f3ff:fe03:4d0])
	by orange.kame.net (Postfix) with ESMTP id C5D94356727
	for <[email protected]>; Thu, 16 Mar 2006 19:07:16 +0900 (JST)
Received: from smtp1.int-evry.fr (smtp1.int-evry.fr [157.159.10.44])
	by sardine.kame.net (Postfix) with ESMTP id 181C2889
	for <[email protected]>; Thu, 16 Mar 2006 19:06:34 +0900 (JST)
Received: from lor-maknavic2.int-evry.fr (lor-maknavic2.int-evry.fr [157.159.103.216])
	by smtp1.int-evry.fr (Postfix) with ESMTP id 244D118CF9A;
	Thu, 16 Mar 2006 11:09:42 +0100 (CET)
Subject: IKEv2 implementation
From: Franck GILLET <[email protected]>
Reply-To: [email protected]
To: [email protected], [email protected]
Content-Type: text/plain
Date: Thu, 16 Mar 2006 11:06:39 +0100
Message-Id: <[email protected]>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 (2.2.3-2.fc4) 
Content-Transfer-Encoding: 7bit
X-INT-MailScanner-Information: Please contact the ISP for more information
X-INT-MailScanner: Found to be clean
X-INT-MailScanner-SpamCheck: 
X-INT-MailScanner-From: [email protected]

Hello,

I have to evaluate IKEv2 implementations for my research project and to
test it in IPv6 network.

I found three projects that can interest me: sourceforge implementation
of IKEv2 ( hsourceforge.net/projects/ikev2 ), racoon2 project
( www.kame.net ), and OpenIKEv2 project ( openikev2.sourceforge.net ).

I want to compare functionalities concerning (in order preferably):
-linux 2.6 kernel support
-complete support for IPv6
-accordance with draft version 17 or RFC 4306 (IKEv2)
-small and clean code (minimal functionalities)
-EAP support (RADIUS, SIM...)
-certificate support
-NAT Traversal (RFC3947)
-complete libcrypto
-configuration payload

OpenIKEv2 web pages give a synthetic comparison of these implementation
at http://openikev2.sourceforge.net/IKEv2-Implementations.html .
I join the features table:

Features	OpenIKEv2	racoon2		ikev2

Version		17/01/2006	02/11/2005	10/01/2006

Cookies		Yes		Yes		Yes

DH group 
negotiation	Yes		Yes		 Yes

Proposal
negotiation	Yes		Yes		Yes

Traffic selector
negotiation	Yes		Yes		Yes

Narrowing	Yes		No		No

Preshared-Key
Authentication	Yes		Yes		Yes

Certificate 
Authentication	No		Yes		Yes

SA Bundles (ESP+AH
support)	No		Yes		?

Child SA 
Rekeying	Soft		Soft		Soft

IKE SA 
Rekeying	Soft		 Soft		?

Child SA 
Deletion	Yes		Yes		Yes

IKE SA Deletion	Yes		Yes		Yes

Configuration
Payload (Dynamic
Addressing)	Yes		No		No

NAT Traversal	No		No		No

EAP Support	No		No		No

Configuration File
Format		Plain text	Plain text	Plain text

Tunnel Mode 
IPSec		Yes		Yes		Yes

Transport Mode
IPSec		Yes		Yes		Yes

IPSec Interface	XFRM / PFKEYv2	PFKEYv2		PFKEYv2

Perfect Forward
Secrecy for
CHILD_SAs	Yes		Yes		?

IPv6 support	Yes		Yes		No

Different
configuration per
peer		Yes		Yes		Yes



If any information is wrong, don't hesitate to send me a message... I
will forward a request for update to a project manager of OpenIKEv2.

Thanks in advance.

Best Regards.

Franck GILLET.
[email protected]




--------------040102050601020708090207--