4306: Internet Key Exchange (IKEv2) Protocol.

HTML TXT PS PDF

This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and establishing and maintaining security associations (SAs).

Status PROPOSED STANDARD
Format TXT=250941 bytes
Authors
Date December 2005
Keyphrases payload SA IKE IKEv2

Obsoletes

RFC2407: The Internet IP Security Domain of Interpretation for
RFC2408: Internet Security Association and Key Management Protocol (ISAKMP).
RFC2409: The Internet Key Exchange (IKE).

References

RFC822: STANDARD FOR THE FORMAT OF ARPA INTERNET TEXT
RFC1321: The MD5 Message-Digest Algorithm.
RFC1826: IP Authentication Header.
RFC1827: IP Encapsulating Security Payload (ESP).
RFC1958: Architectural Principles of the Internet.
RFC2104: HMAC: Keyed-Hashing for Message Authentication.
RFC2119: Key words for use in RFCs to Indicate Requirement Levels.
RFC2131: Dynamic Host Configuration Protocol.
RFC2251: Lightweight Directory Access Protocol (v3).
RFC2367: PF_KEY Key Management API, Version 2.
RFC2394: IP Payload Compression Using
RFC2395: IP Payload Compression Using
RFC2401: Security Architecture for the Internet Protocol.
RFC2403: The Use of HMAC-MD5-96 within ESP and
RFC2404: The Use of HMAC-SHA-1-96 within ESP and
RFC2405: The ESP DES-CBC Cipher Algorithm With Explicit
RFC2407: The Internet IP Security Domain of Interpretation for
RFC2408: Internet Security Association and Key Management Protocol (ISAKMP).
RFC2409: The Internet Key Exchange (IKE).
RFC2410: The NULL Encryption Algorithm and Its Use With IPsec.
RFC2412: The OAKLEY Key Determination Protocol.
RFC2434: Guidelines for Writing an IANA Considerations Section in RFCs.
RFC2451: The ESP CBC-Mode Cipher Algorithms.
RFC2474: Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers.
RFC2475: An Architecture for Differentiated Service.
RFC2522: Photuris: Session-Key Management Protocol.
RFC2775: Internet Transparency.
RFC2865: Remote Authentication Dial In User Service (RADIUS).
RFC2983: Differentiated Services and Tunnels.
RFC3051: IP Payload Compression Using ITU-T V.44 Packet Method.
RFC3168: The Addition of Explicit Congestion Notification (ECN) to
RFC3173: IP Payload Compression Protocol (IPComp).
RFC3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile.
RFC3439: Some Internet Architectural Guidelines and Philosophy.
RFC3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1.
RFC3513: Internet Protocol Version 6 (IPv6) Addressing Architecture.
RFC3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE).
RFC3566: The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec.
RFC3602: The AES-CBC Cipher Algorithm and Its Use with IPsec.
RFC3664: The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE).
RFC3715: IPsec-Network Address Translation (NAT) Compatibility Requirements.
RFC3748: Extensible Authentication Protocol (EAP).
RFC3948: UDP Encapsulation of IPsec ESP Packets.
RFC4086: Randomness Requirements for Security. D. Eastlake, 3rd,
RFC4301: Security Architecture for the Internet Protocol.
RFC4302: IP Authentication Header.
RFC4303: IP Encapsulating Security Payload (ESP).

Referenced by

RFC4230: RSVP Security Properties.
RFC4285: Authentication Protocol for Mobile IPv6.
RFC4294: IPv6 Node Requirements.
RFC4301: Security Architecture for the Internet Protocol.
RFC4302: IP Authentication Header.
RFC4303: IP Encapsulating Security Payload (ESP).
RFC4305: Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH).
RFC4307: Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2).
RFC4308: Cryptographic Suites for IPsec.
RFC4309: Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP).
RFC4347: Datagram Transport Layer Security.
RFC4359: The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH).
RFC4380: Teredo: Tunneling IPv6 over UDP through Network Address Translations (NATs).
RFC4423: Host Identity Protocol (HIP) Architecture.
RFC4430: Kerberized Internet Negotiation of Keys (KINK).
RFC4434: The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE).
RFC4478: Repeated Authentication in Internet Key Exchange (IKEv2) Protocol.
RFC4535: GSAKMP: Group Secure Association Key Management Protocol.
RFC4540: NEC's Simple Middlebox Configuration (SIMCO) Protocol Version 3.0.
RFC4543: The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and
RFC4552: Authentication/Confidentiality for OSPFv3.
RFC4555: IKEv2 Mobility and Multihoming Protocol (MOBIKE).
RFC4568: Session Description Protocol (SDP) Security Descriptions for Media Streams.
RFC4595: Use of IKEv2 in the Fibre Channel Security Association Management Protocol.
RFC4601: Protocol Independent Multicast - Sparse Mode (PIM-SM): Protocol Specification (Revised).
RFC4615: The Advanced Encryption Standard-Cipher-based Message Authentication Code-Pseudo-Random Function-128 (AES-CMAC-PRF-128) Algorithm for the Internet Key Exchange Protocol (IKE).
RFC4621: Design of the IKEv2 Mobility and Multihoming (MOBIKE) Protocol.
RFC4650: HMAC-Authenticated Diffie-Hellman for Multimedia Internet KEYing (MIKEY).
RFC4718: IKEv2 Clarifications and Implementation Guidelines.
RFC4739: Multiple Authentication Exchanges in the Internet Key Exchange (IKEv2) Protocol.