RFC 6631

"Password Authenticated Connection Establishment with the Internet Key Exchange Protocol version 2 (IKEv2)", June 2012

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6631.txt
This document is also available in this non-normative format: PDF.

Status:

EXPERIMENTAL

Authors:

D. Kuegler
Y. Sheffer

Stream:

IETF

Source:

NON WORKING GROUP

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

The Internet Key Exchange protocol version 2 (IKEv2) does not allow secure peer authentication when using short credential strings, i.e., passwords. Several proposals have been made to integrate password-authentication protocols into IKE. This document provides an adaptation of Password Authenticated Connection Establishment (PACE) to the setting of IKEv2 and demonstrates the advantages of this integration. This document defines an Experimental Protocol for the Internet community.

For the definition of Stream, see RFC 4844.