RE: CALL FOR DISCUSSION: DHCP over IKE vs Configuration Payload

[Michael Thomas <mat@cisco.com>]

I'm not entirely sure how impolitic this is wrt my
employer's hive mind, but the thing that really
tips my feeling about this is that DHCP-in-IKE
keeps the IPsec wg out of the business of dealing
with... configuration. That seems like a huge boon
in my mind from a wheel-reinvention standpoint.

So, mark my preference as DHCP-in-IKE.

	 Mike

Scott G. Kelly writes:
 > I think Darren's summary is pretty accurate. It's kind of a toss up.
 > However, one difference that I note is that with the dhcp approach, all
 > client config is (potentially) done prior to the instantiation of the
 > child sa. I'm not sure if this is a benefit or not, but it might be.
 > 
 > Scott