Search RFCs

RFC Editor

File formats:

Status:

PROPOSED STANDARD

Obsoletes:

RFC 2407,RFC 2408,RFC 2409

Obsoleted by:

RFC 5996

Updated by:

RFC 5282

Author:

C. Kaufman, Ed.

Stream:

IETF

Source:

ipsec (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC4306

Discuss this RFC: Send questions or comments to the mailing listiesg@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 4306

Abstract

This document describes version 2 of the Internet Key Exchange (IKE)protocol. IKE is a component of IPsec used for performing mutualauthentication and establishing and maintaining security associations(SAs).

This version of the IKE specification combines the contents of whatwere previously separate documents, including Internet SecurityAssociation and Key Management Protocol (ISAKMP, RFC 2408), IKE(RFC 2409), the Internet Domain of Interpretation (DOI, RFC 2407),Network Address Translation (NAT) Traversal, Legacyauthentication, and remote address acquisition.

Version 2 of IKE does not interoperate with version 1, but it hasenough of the header format in common that both versions canunambiguously run over the same UDP port. [STANDARDS-TRACK]

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.