1. Home
  2. Virtual Private Networks
  3. IKE Phase1 3rd message pair

IKE Phase1 3rd message pair

Hi, This is a follow up of the below mentioned discussion.

formatting link
I would like to know what does the recipient of message 5 of IKE phase

1 do with the ID payload?? Same question applies to the recipient of message 6.

Thanks and Regards, Prashant

Reply to
pvsnmp
Loading thread data ...

formatting link

I answered that in the last message in the thread you reference.

Reply to
Stephen J. Bevan

Hi Stephen,

In pre-shared key authentication, does the recipient of message 5 or 6 do anything else with the ID than using it for computation of hash?

Thanks and Regards, Prashant

Reply to
pvsnmp

The recipient should validate the ID according to their security policy the details of which are not dictated by IKE. So, it can vary from doing no validation (common if the ID is an IP address) to doing checks like the ones I describe in the paragraph you quote.

Reply to
Stephen J. Bevan

Thanks Stephen for the reply.

Prashant

Reply to
pvsnmp

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.