⌕ Поиск по атласу

IETF · RFC · RFC7791

RFC7791 · Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2)

Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2)

This document considers a VPN end user establishing an IPsec Security Association (SA) with a Security Gateway using the Internet Key Exchange Protocol version 2 (IKEv2), where at least one of the peers has multiple interfaces or where Security Gateway is a cluster with each node having its own IP address. The protocol described allows a peer to clone an IKEv2 SA, where an additional SA is derived from an existing one. The newly created IKE SA is set without the IKEv2 authentication exchange. This IKE SA can later be assigned to another interface or moved to another cluster node.

Официальная английская аннотация

This document considers a VPN end user establishing an IPsec Security Association (SA) with a Security Gateway using the Internet Key Exchange Protocol version 2 (IKEv2), where at least one of the peers has multiple interfaces or where Security Gateway is a cluster with each node having its own IP address. The protocol described allows a peer to clone an IKEv2 SA, where an additional SA is derived from an existing one. The newly created IKE SA is set without the IKEv2 authentication exchange. This IKE SA can later be assigned to another interface or moved to another cluster node.

Связи документа

Официальный источник · 2016-03-01

Полные импортированные сведения карточки
{
  "id": "RFC7791",
  "number": 7791,
  "title_en": "Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document considers a VPN end user establishing an IPsec Security Association (SA) with a Security Gateway using the Internet Key Exchange Protocol version 2 (IKEv2), where at least one of the peers has multiple interfaces or where Security Gateway is a cluster with each node having its own IP address. The protocol described allows a peer to clone an IKEv2 SA, where an additional SA is derived from an existing one. The newly created IKE SA is set without the IKEv2 authentication exchange. This IKE SA can later be assigned to another interface or moved to another cluster node.",
  "authors": [
    "D. Migault",
    "V. Smyslov"
  ],
  "organizations": [],
  "publication_date": "2016-03-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "",
  "area_ru": "",
  "working_group": "NON WORKING GROUP",
  "source_draft": "draft-mglt-ipsecme-clone-ike-sa-09",
  "page_count": 14,
  "doi": "10.17487/RFC7791",
  "keywords": [
    "MIF",
    "Load balancing",
    "Load sharing",
    "MOBIKE"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc7791/",
    "html": "https://www.rfc-editor.org/rfc/rfc7791.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc7791.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7791/"
  }
}