Subject: [Ipsec] Please review: IKEv2 for FC

From: [email-masked]
Date: Thu, 10 Feb 2005 20:22:16 -0500

Some people may recall me mentioning work on Fibre Channel
usage of IKEv2 - in essence, Fibre Channel needs a security
association negotiation/setup protocol, and reusing IKEv2
is preferable to inventing a new one for many reasons.
To be precise, a cut-down and adapted version of IKEv2 is
to be used - e.g., things like NAT and EAP are not Fibre
Channel concerns, at least not yet ;-).

This work has now progressed to the point that there's a
Internet-Draft on the additional IKEv2 values that need to
be defined for Fibre Channel, draft-maino-fcsp-01.txt:

http://www.ietf.org/internet-drafts/draft-maino-fcsp-01.txt

One advantage of defining new values is that it makes it
fairly easy to prevent IKEv2 proposals from getting confused
between IP and FC - if a proposal is accidentally sent in
the wrong context, it will be rejected as containing some
things that the peer does not support.

The only thing that this draft does is define the IKEv2
values needed to setup SAs over Fibre Channel - the actual
details of how to carry IKEv2 traffic over Fibre Channel
are being specified in T11 (the Fibre Channel standards body),
ditto the details of the security protocols used.

After review of this draft on this mailing list, the plan is
to ask our AD (Russ) to take the revised draft as an individual
submission to the IESG for Proposed Standard.

Thanks in advance for comments, input, etc.,
--David

----------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 176 South St., Hopkinton, MA  01748
+1 (508) 293-7953             FAX: +1 (508) 293-7786
[email-masked]        Mobile: +1 (978) 394-7754
----------------------------------------------------

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec