RFC 5996: Internet Key Exchange Protocol Version 2 (IKEv2)

This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and…

Read RFC 5996 on the RFC Editor

Outgoing relationships (46 related RFCs)

Obsoletes, Informative reference — RFC 4306: Internet Key Exchange (IKEv2) Protocol
Obsoletes, Informative reference — RFC 4718: IKEv2 Clarifications and Implementation Guidelines
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4301: Security Architecture for the Internet Protocol
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 4291: IP Version 6 Addressing Architecture
Normative reference — RFC 3168: The Addition of Explicit Congestion Notification (ECN) to IP
Normative reference — RFC 3748: Extensible Authentication Protocol (EAP)
Normative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Normative reference — RFC 3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
Normative reference — RFC 2451: The ESP CBC-Mode Cipher Algorithms
Normative reference — RFC 3948: UDP Encapsulation of IPsec ESP Packets
Normative reference — RFC 4307: Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2)
Normative reference — RFC 5282: Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) Protocol
Normative reference — RFC 4434: The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE)
Normative reference — RFC 4615: The Advanced Encryption Standard-Cipher-based Message Authentication Code-Pseudo-Random Function-128 (AES-CMAC-PRF-128) Algorithm for the Internet Key Exchange Protocol (IKE)
Informative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 1321: The MD5 Message-Digest Algorithm
Informative reference — RFC 2401: Security Architecture for the Internet Protocol
Informative reference — RFC 2474: Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers
Informative reference — RFC 4302: IP Authentication Header
Informative reference — RFC 5322: Internet Message Format
Informative reference — RFC 2409: The Internet Key Exchange (IKE)
Informative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Informative reference — RFC 2475: An Architecture for Differentiated Services
Informative reference — RFC 3775: Mobility Support in IPv6
Informative reference — RFC 3810: Multicast Listener Discovery Version 2 (MLDv2) for IPv6
Informative reference — RFC 2407: The Internet IP Security Domain of Interpretation for ISAKMP
Informative reference — RFC 4282: The Network Access Identifier
Informative reference — RFC 1958: Architectural Principles of the Internet
Informative reference — RFC 2983: Differentiated Services and Tunnels
Informative reference — RFC 2408: Internet Security Association and Key Management Protocol (ISAKMP)
Informative reference — RFC 4555: IKEv2 Mobility and Multihoming Protocol (MOBIKE)
Informative reference — RFC 2412: The OAKLEY Key Determination Protocol
Informative reference — RFC 2775: Internet Transparency
Informative reference — RFC 3715: IPsec-Network Address Translation (NAT) Compatibility Requirements
Informative reference — RFC 2522: Photuris: Session-Key Management Protocol
Informative reference — RFC 3173: IP Payload Compression Protocol (IPComp)
Informative reference — RFC 5335: Internationalized Email Headers
Informative reference — RFC 2367: PF_KEY Key Management API, Version 2
Informative reference — RFC 3439: Some Internet Architectural Guidelines and Philosophy
Informative reference — RFC 5739: IPv6 Configuration in Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 5857: IKEv2 Extensions to Support Robust Header Compression over IPsec
Informative reference — RFC 4478: Repeated Authentication in Internet Key Exchange (IKEv2) Protocol

Incoming relationships (41 related RFCs)

Updated by, Normatively referenced by — RFC 5998: An Extension for EAP-Only Authentication in IKEv2
Updated by — RFC 6989: Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2)
Obsoleted by — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 6275: Mobility Support in IPv6
Normatively referenced by — RFC 6092: Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service
Normatively referenced by — RFC 6001: Generalized MPLS (GMPLS) Protocol Extensions for Multi-Layer and Multi-Region Networks (MLN/MRN)
Normatively referenced by — RFC 6467: Secure Password Framework for Internet Key Exchange Version 2 (IKEv2)
Normatively referenced by — RFC 6253: Host Identity Protocol Certificates
Normatively referenced by — RFC 7143: Internet Small Computer System Interface (iSCSI) Protocol (Consolidated)
Normatively referenced by — RFC 7146: Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3
Normatively referenced by — RFC 6027: IPsec Cluster Problem Statement
Normatively referenced by — RFC 6311: Protocol Support for High Availability of IKEv2/IPsec
Normatively referenced by — RFC 6568: Design and Application Spaces for IPv6 over Low-Power Wireless Personal Area Networks (6LoWPANs)
Normatively referenced by — RFC 5981: Authorization for NSIS Signaling Layer Protocols
Normatively referenced by — RFC 6617: Secure Pre-Shared Key (PSK) Authentication for the Internet Key Exchange Protocol (IKE)
Normatively referenced by — RFC 6628: Efficient Augmented Password-Only Authentication and Key Exchange for IKEv2
Normatively referenced by — RFC 6631: Password Authenticated Connection Establishment with the Internet Key Exchange Protocol version 2 (IKEv2)
Normatively referenced by — RFC 6738: Diameter IKEv2 SK: Using Shared Keys to Support Interaction between IKEv2 Servers and Diameter Servers
Normatively referenced by — RFC 6786: Encrypting the Protocol for Carrying Authentication for Network Access (PANA) Attribute-Value Pairs
Normatively referenced by — RFC 6867: An Internet Key Exchange Protocol Version 2 (IKEv2) Extension to Support EAP Re-authentication Protocol (ERP)
Normatively referenced by — RFC 6898: Link Management Protocol Behavior Negotiation and Configuration Modifications
Normatively referenced by — RFC 6954: Using the Elliptic Curve Cryptography (ECC) Brainpool Curves for the Internet Key Exchange Protocol Version 2 (IKEv2)
Informatively referenced by — RFC 6347: Datagram Transport Layer Security Version 1.2
Informatively referenced by — RFC 6269: Issues with IP Address Sharing
Informatively referenced by — RFC 6040: Tunnelling of Explicit Congestion Notification
Informatively referenced by — RFC 6952: Analysis of BGP, LDP, PCEP, and MSDP Issues According to the Keying and Authentication for Routing Protocols (KARP) Design Guide
Informatively referenced by — RFC 6709: Design Considerations for Protocol Extensions
Informatively referenced by — RFC 6296: IPv6-to-IPv6 Network Prefix Translation
Informatively referenced by — RFC 7166: Supporting Authentication Trailer for OSPFv3
Informatively referenced by — RFC 6407: The Group Domain of Interpretation
Informatively referenced by — RFC 6281: Understanding Apple's Back to My Mac (BTMM) Service
Informatively referenced by — RFC 6606: Problem Statement and Requirements for IPv6 over Low-Power Wireless Personal Area Network (6LoWPAN) Routing
Informatively referenced by — RFC 6696: EAP Extensions for the EAP Re-authentication Protocol (ERP)
Informatively referenced by — RFC 6506: Supporting Authentication Trailer for OSPFv3
Informatively referenced by — RFC 6632: An Overview of the IETF Network Management Standards
Informatively referenced by — RFC 6071: IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap
Informatively referenced by — RFC 6054: Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic
Informatively referenced by — RFC 6089: Flow Bindings in Mobile IPv6 and Network Mobility (NEMO) Basic Support
Informatively referenced by — RFC 6097: Local Mobility Anchor (LMA) Discovery for Proxy Mobile IPv6
Informatively referenced by — RFC 7126: Recommendations on Filtering of IPv4 Packets Containing IPv4 Options
Informatively referenced by — RFC 6618: Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent