Re: New traffic Selectors in RFC2401bis

[Stephen Kent <kent@bbn.com>]

At 18:43 -0800 11/16/03, Mohan Parthasarathy wrote:
>Hello,
>
>RFC2401bis defines ICMP type and code as selector. AFAIK, this itself can be
>negotiated
>only using IKEv2 traffic selector and one cannot use IKEv1 ID payload. If
>this is correct,
>is it worth clarifying in the document ? I can see that the IKE reference
>has been removed
>currently. I assume that both IKE versions will be referenced in the future
>revision. In that
>case it might be worth clarifying the issue i guess. Not sure what else is
>IKEv2 specific.
>
>thanks
>mohan

Mohan,

In general, 2401bis is closely aligned with features of IKEv2.  The 
new structure of SPD entries allows one SA to represent several, 
distinct S/D address pairs or port ranges, etc. This too cannot be 
negotiated with IKE v1. In general, 2401bis represents an updating of 
2401 that also assumes use of IKE v2 vs. v1.

Steve