RE: CALL FOR DISCUSSION: DHCP over IKE vs Configuration Payload

[Gregory Lebovitz <Gregory@netscreen.com>]

I see this as both a pro and con. 

PRO - it gets it done earlier, in terms of the exchange process, whereas the
doc we wrote has the more extensive DHCP config occuring after CHILD-SA;
only the basics are done in IKE.

CON - it makes IKE heavier, more bytes (the more config options returned,
the more bytes) and thus IKE will take longer time-wise to complete.

Gregory.

> -----Original Message-----
> From: Scott G. Kelly [mailto:scott@airespace.com]
> Sent: Monday, April 14, 2003 9:37 AM
> To: ipsec@lists.tislabs.com
> Subject: RE: CALL FOR DISCUSSION: DHCP over IKE vs 
> Configuration Payload
> 
> 
> 
> I think Darren's summary is pretty accurate. It's kind of a toss up.
> However, one difference that I note is that with the dhcp 
> approach, all
> client config is (potentially) done prior to the instantiation of the
> child sa. I'm not sure if this is a benefit or not, but it might be.
> 
> Scott
>