Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Michael Richardson
Paul Wouters wrote: >> For a basic use case, any response would suffice. The essential >> requirement is the ability to send a request and receive a response >> from the IPsec peer, which is why I proposed the minimal solution to >> begin with. > I disagree. VPN protocols are

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Michael Richardson
Antony Antony wrote: >> In the original proposal it was clear, as the reserved SPI values were >> used. Am I missing anything? > For a minimal use case it may work; however, for more generic use > cases, such as sending multiple requests simultaneously from multiple > applic

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Paul Wouters
On Fri, 12 Jan 2024, Antony Antony wrote: For a basic use case, any response would suffice. The essential requirement is the ability to send a request and receive a response from the IPsec peer, which is why I proposed the minimal solution to begin with. I disagree. VPN protocols are actively

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Antony Antony
On Wed, Jan 10, 2024 at 05:07:55PM +0100, Jen Linkova wrote: > Hello, > > Jen here, a new co-author of this undoubtedly useful draft. > I'm working on addressing comments received after -00 was submitted, > and I have a question.. Thanks, Jen. I'm glad to seee this ID will be updatead soon, befor

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Jen Linkova
On Wed, Jan 10, 2024 at 9:34 PM Scott Fluhrer (sfluhrer) wrote: > Well, I just glanced through the original draft, and I'm a bit confused about > the objectives. > > Essentially, it's a way to ask "is there someone at IP address x.x.x.x that > supports IPsec and is reachable" > > Normally, we wa

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Michael Richardson
Scott Fluhrer \(sfluhrer\) wrote: > Well, I just glanced through the original draft, and I'm a bit confused > about the objectives. > Essentially, it's a way to ask "is there someone at IP address x.x.x.x > that supports IPsec and is reachable" No, that isn't really the goal. Th

Re: [IPsec] Fwd: New Version Notification for draft-colitti-ipsecme-esp-ping-00.txt

2024-01-12 Thread Michael Richardson
Jen Linkova wrote: >> "Upon completing an IKE negotiation, an IPsec peer wishing to >> ascertain the viability of the path for ESP packets MAY initiate an >> ESP Echo Request packet to the other peer. The ESP Echo Request packet >> MAY be encrypted. If encrypted, it SHOULD utilize

[IPsec] I-D Action: draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-02.txt

2024-01-12 Thread internet-drafts
Internet-Draft draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-02.txt is now available. It is a work item of the IP Security Maintenance and Extensions (IPSECME) WG of the IETF. Title: IKEv2 Optional SA&TS Payloads in Child Exchange Authors: Sandeep Kampati Wei Pan Paul