Re: Specification of tunnel/transport attribute in IKEv2

[Henry Spencer <henry@spsystems.net>]

On Wed, 15 May 2002, Markku Savela wrote:
> > Simply removing these issues from IKE does not make them go away.
> 
> There is no need for such other protocol. Assuming your implementation
> is conformant to RFC-2401, it already does the policy checking,
> whether IKE is present or not.

It does not do consistency checking to ensure that the policies on the two
ends match.  Nor does it have any way of selecting between policy options,
when the other end may not accept all choices.  These are practical issues
of great importance, however trivial they may seem in theory. 

                                                          Henry Spencer
                                                       henry@spsystems.net