Subject: [IPsec] draft-ietf-ipsecme-qr-ikev2-01 interop

From: Paul Wouters <[email-masked]>
Date: Mon, 15 Jan 2018 18:17:12 -0500 (EST)

We have done a successful interop with Valerie for draft-ietf-ipsecme-qr-ikev2-01

If anyone else wants to try:

Using the following private use numbers:

        v2N_USE_PPK = 40960,            /* draft-ietf-ipsecme-qr-ikev2-01 */
        v2N_PPK_IDENTITY = 40961,       /* draft-ietf-ipsecme-qr-ikev2-01 */
        v2N_NO_PPK_AUTH = 40962,        /* draft-ietf-ipsecme-qr-ikev2-01 */

server: vpn-ppk.nohats.ca
server id ID_FQDN: vpn-ppk.nohats.ca
local id (group id): GroupPPK1
PSK: SecretPSK
PPK ID: PPKID1
PPK: NotQuantumSafe

Please test with the correct PPK ID and the wrong PPK ID (for NO_PPK_AUTH). The
server allows both with and without PPK for these connections. It uses
CP to hand you an IP address in the 100.64.13.0/24 range. You should
have full internet access to ping things (eg 8.8.8.8)

Let me know if you succeed or fail to interop.

Paul & Vukasin