Re: [IPsec] IKEv2 and ERP

2011-11-23 Thread Qin Wu
, 2011 4:07 PM Subject: RE: [IPsec] IKEv2 and ERP [resending as plaintext] Thanks, Qin I wonder what the rationale is for this. Why would a phone that's already on the Internet connect to the visited network rather than the home network. Is that because of concerns about bandwidth

Re: [IPsec] IKEv2 and ERP

2011-11-20 Thread Tina TSOU
Yoav, I assume the similar use case for enterprise. Sent from my iPad On Nov 20, 2011, at 4:02 PM, Yoav Nir y...@checkpoint.commailto:y...@checkpoint.com wrote: Hi Yaron Actually the motivation in my case is a smooth transition from a 802.1x local network, to remote access VPN on a

Re: [IPsec] IKEv2 and ERP

2011-11-19 Thread Yoav Nir
On Aug 6, 2011, at 10:37 PM, Yoav Nir wrote: Hi At the meeting in Quebec, I gave a presentation at the hokey meeting about http://tools.ietf.org/html/draft-nir-ipsecme-erx . The draft covers using the EAP extensions for re-authentication in IKEv2. The obvious (to me) use-case is a

Re: [IPsec] IKEv2 and ERP

2011-11-19 Thread Yaron Sheffer
Hi Yoav, motivation for this work seems to have come from 3GPP/3GPP2/WiMAX, and I strongly suggest that you or your coauthor go back to the originating organization to validate your use case(s). I find the new paragraph (top of Sec. 3.2) confusing: I would

[IPsec] IKEv2 and ERP

2011-08-06 Thread Yoav Nir
Hi At the meeting in Quebec, I gave a presentation at the hokey meeting about http://tools.ietf.org/html/draft-nir-ipsecme-erx . The draft covers using the EAP extensions for re-authentication in IKEv2. The obvious (to me) use-case is a phone connected to a 802.1x network. As you leave the