Search RFCs

RFC Editor

File formats:

Status:

PROPOSED STANDARD

Updates:

RFC 4656,RFC 5357

Authors:

K. Pentikousis, Ed.
E. Zhang
Y. Cui

Stream:

IETF

Source:

ippm (ops)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC7717

Discuss this RFC: Send questions or comments to the mailing listippm@ietf.org

Other actions:Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 7717

Abstract

The One-Way Active Measurement Protocol (OWAMP) and Two-Way ActiveMeasurement Protocol (TWAMP) security mechanisms require that boththe client and server endpoints possess a shared secret. Thisdocument describes the use of keys derived from an IKEv2 securityassociation (SA) as the shared key in OWAMP or TWAMP. If the sharedkey can be derived from the IKEv2 SA, OWAMP or TWAMP can supportcertificate-based key exchange; this would allow for more operationalflexibility and efficiency. The key derivation presented in thisdocument can also facilitate automatic key management.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.