Re: [IPsec] Clarification on identities involved in IKEv2EAP authentication

2009-11-11 Thread Srinivasu S R S Dhulipala (srinid)
identities involved in IKEv2EAP authentication On Nov 10, 2009, at 1:40 PM, Amjad Inamdar (amjads) wrote: > Hi, > > With IKEv2 EAP authentication, there are 3 identities involved > > 1) IDi - IKEv2 initiator identity sent in msg-3 > 2) EAP identity that gateway (IKE2 responder) ca

Re: [IPsec] Clarification on identities involved in IKEv2EAP authentication

2009-11-11 Thread Yoav Nir
On Nov 11, 2009, at 3:39 PM, Srinivasu S R S Dhulipala (srinid) wrote: > >> 2) If not same, what purpose should each of the above identities serve > > 1) mainly used as a hint for the gateway as to which AAA server to > choose > 2) It's the AAA server that may request the identity, and it's

Re: [IPsec] Clarification on identities involved in IKEv2EAP authentication

2009-11-12 Thread Frederic Detienne
On 11 Nov 2009, at 14:53, Yoav Nir wrote: > > On Nov 11, 2009, at 3:39 PM, Srinivasu S R S Dhulipala (srinid) wrote: >> >>> 2) If not same, what purpose should each of the above identities serve >> >> 1) mainly used as a hint for the gateway as to which AAA server to >> choose >> 2) It's the