Subject: RE: [Ipsec] PFS

From: [email-masked]
Date: Mon, 14 Nov 2005 11:22:14 +0200

Alejandro Perez Mendez wrote:

> But a AH + ESP combination it is allowed in the specification 
> since PROPOSAL structure can contain more than one protocol 
> substructure. Why is this allowed if the correspondent behaviour 
> is not specified?

IKEv2 does not forbid having more than one protocol substructure 
so that it can be later extended to create other types of SAs
than those defined in 2401bis. But those other types of SAs are 
not part of the IKEv2 base specification (e.g. draft-maino-fcsp-02 
extends IKEv2 to create fibre channel SAs).

Best regards,
Pasi

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec