Repeated Authentication in Internet Key Exchange (IKEv2) Protocol, April 2006
- Canonical URL:
- File formats:
- Y. Nir
- NON WORKING GROUP
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
This document extends the Internet Key Exchange (IKEv2) Protocol document [IKEv2]. With some IPsec peers, particularly in the remote access scenario, it is desirable to repeat the mutual authentication periodically. The purpose of this is to limit the time that security associations (SAs) can be used by a third party who has gained control of the IPsec peer. This document describes a mechanism to perform this function. This memo defines an Experimental Protocol for the Internet community.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 4844.