[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: isakmp cookies field
> > could anybody tell me what the benefit of the isakmp cookie
> > field is ?
> > i think the cookie indicates just isakmp spi. does it have
> > any function
> > to prevent from dos attack ?
> Yes, exactly. See RFC 2048 (ISAKMP), section 2.5.3 (Anti-Clogging Token
> ("Cookie") Creation), on pages 20-21.
of course, i've read this document. but i think this cookie creation
couldn't prevent from dos or mitm attack.
if nodes which would start to communicate knew the local secret information,
yes, the cookie function could prevent from the attack. but the local
secret information is known by the entity that creates a cookie.
Or does nodes have to share any local secret information before the
isakmp negotiation is started.
Follow-Ups:
References: