RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)

This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and…

Read RFC 7296 on the RFC Editor

Outgoing relationships (1 related RFC)

Obsoletes — RFC 5996: Internet Key Exchange Protocol Version 2 (IKEv2)

Incoming relationships (54 related RFCs)

Showing 50 of 54 related RFCs.

Updated by — RFC 7427: Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
Updated by, Normatively referenced by — RFC 9370: Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)
Updated by, Normatively referenced by — RFC 8247: Algorithm Implementation Requirements and Usage Guidance for the Internet Key Exchange Protocol Version 2 (IKEv2)
Updated by, Normatively referenced by — RFC 9827: Renaming the Extended Sequence Numbers (ESN) Transform Type in the Internet Key Exchange Protocol Version 2 (IKEv2)
Updated by — RFC 7670: Generic Raw Public-Key Support for IKEv2
Updated by — RFC 8983: Internet Key Exchange Protocol Version 2 (IKEv2) Notification Status Types for IPv4/IPv6 Coexistence
Normatively referenced by — RFC 9260: Stream Control Transmission Protocol
Normatively referenced by — RFC 7619: The NULL Authentication Method in the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 7421: Analysis of the 64-bit Boundary in IPv6 Addressing
Normatively referenced by — RFC 7836: Guidelines on the Cryptographic Algorithms to Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012
Normatively referenced by — RFC 8994: An Autonomic Control Plane (ACP)
Normatively referenced by — RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
Normatively referenced by — RFC 7634: ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsec
Normatively referenced by — RFC 7717: IKEv2-Derived Shared Secret Key for the One-Way Active Measurement Protocol (OWAMP) and Two-Way Active Measurement Protocol (TWAMP)
Normatively referenced by — RFC 8750: Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP)
Normatively referenced by — RFC 8002: Host Identity Protocol Certificates
Normatively referenced by — RFC 8019: Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks
Normatively referenced by — RFC 9347: Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS)
Normatively referenced by — RFC 9838: Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 7652: Port Control Protocol (PCP) Authentication Mechanism
Normatively referenced by — RFC 9227: Using GOST Ciphers in the Encapsulating Security Payload (ESP) and Internet Key Exchange Version 2 (IKEv2) Protocols
Normatively referenced by — RFC 9464: Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS
Normatively referenced by — RFC 9867: Mixing Preshared Keys in the IKE_INTERMEDIATE and CREATE_CHILD_SA Exchanges of the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-Quantum Security
Normatively referenced by — RFC 7651: 3GPP IP Multimedia Subsystems (IMS) Option for the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 7733: Applicability Statement: The Use of the Routing Protocol for Low-Power and Lossy Networks (RPL) Protocol Suite in Home Automation and Building Control
Normatively referenced by — RFC 7791: Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 9333: Minimal IP Encapsulating Security Payload (ESP)
Normatively referenced by — RFC 9385: Using GOST Cryptographic Algorithms in the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 9478: Labeled IPsec Traffic Selector Support for the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 9593: Announcing Supported Authentication Methods in the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 9611: Internet Key Exchange Protocol Version 2 (IKEv2) Support for Per-Resource Child Security Associations (SAs)
Informatively referenced by — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informatively referenced by — RFC 7401: Host Identity Protocol Version 2 (HIPv2)
Informatively referenced by — RFC 7696: Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms
Informatively referenced by — RFC 7556: Multiple Provisioning Domain Architecture
Informatively referenced by — RFC 8221: Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
Informatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Informatively referenced by — RFC 7539: ChaCha20 and Poly1305 for IETF Protocols
Informatively referenced by — RFC 8922: A Survey of the Interaction between Security Protocols and Transport Services
Informatively referenced by — RFC 9063: Host Identity Protocol Architecture
Informatively referenced by — RFC 9810: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
Informatively referenced by — RFC 7857: Updates to Network Address Translation (NAT) Behavioral Requirements
Informatively referenced by — RFC 9372: L-Band Digital Aeronautical Communications System (LDACS)
Informatively referenced by — RFC 7664: Dragonfly Key Exchange
Informatively referenced by — RFC 8387: Practical Considerations and Implementation Experiences in Securing Smart Object Networks
Informatively referenced by — RFC 8743: Multiple Access Management Services Multi-Access Management Services (MAMS)
Informatively referenced by — RFC 8894: Simple Certificate Enrolment Protocol
Informatively referenced by — RFC 9601: Propagating Explicit Congestion Notification across IP Tunnel Headers Separated by a Shim
Informatively referenced by — RFC 9811: Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP)
Informatively referenced by — RFC 9048: Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')