Re: IKEv2:limitation of 4k for UDP payload

[Vinay K Nallamothu <vinay-rc@naturesoft.net>]

On Wed, 2003-03-26 at 19:12, Ravi wrote:
> and why UDP is chosen for IKE over TCP.
Just rewording one of the earlier discussion:

One of the design requirements is transport protocol independence
because of which IKE can not assume about the reliable streaming
capabilities of the transport layer such as TCP. This seems to be the
reason why UDP was chosen over TCP.

But this does not stop from implementing IKE over TCP. In fact few
implementations already do this. For e.g: Check Point FW-1 NG FP3

You can find the original discussion at
http://www.sandelman.ottawa.on.ca/ipsec/1999/05/msg00014.html

vinay