[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
IKE extensions to support dynamic policies
Folks,
Jan Vilhuber and I have a draft out on IKE extensions to support
dynamic policy negotiation. The draft ID is
<draft-srisuresh-ike-policy-extensions-00.txt>. Below is an abstract
of the draft. WOuld appreciate hearing your comments on the draft.
Thanks.
As IPsec is widely deployed, there is increasing need to negotiate
security keys using IKE at application level granularity.
IKE, as currently proposed, has restrictions in negotiating keys
for applications with bundled sessions and complex policies.
The draft identifies the problem with IKE and suggests extensions
to make IKE application and policy friendly. The proposed solution
suggests extensions to the conceptual operation of IPsec as well as
IKE, but does not require changes to existing IKE payloads. The
document introduces a new policy payload that complements existing
IKE payloads and suggests replacing ID payload with the Policy
payload, in Quick mode.
cheers,
suresh
__________________________________________________
Get personalized email addresses from Yahoo! Mail - only $35
a year! http://personal.mail.yahoo.com/
References: