RFC 3456

"Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode", January 2003

Canonical URL:

http://www.rfc-editor.org/rfc/rfc3456.txt
This document is also available in this non-normative format: TXT.PDF.

Status:

PROPOSED STANDARD

Authors:

B. Patel
B. Aboba
S. Kelly
V. Gupta

Stream:

IETF

Source:

ipsra (sec)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

This memo explores the requirements for host configuration in IPsec tunnel mode, and describes how the Dynamic Host Configuration Protocol (DHCPv4) may be leveraged for configuration. In many remote access scenarios, a mechanism for making the remote host appear to be present on the local corporate network is quite useful. This may be accomplished by assigning the host a "virtual" address from the corporate network, and then tunneling traffic via IPsec from the host's ISP-assigned address to the corporate security gateway. In IPv4, DHCP provides for such remote host configuration. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.