3.11 IKE Server Internal Addresses Configuration Attributes (IKEv2) Details

  • Article

See [RFC4306] section 2.19. During the IKE_AUTH exchange, the IPsec remote access client (IRAC) SHOULD request the IPsec remote access server (IRAS)-controlled address.<30>

On initiator:

HDR, SK {IDi, [CERT,] [CERTREQ,] [IDr,] AUTH, CP(CFG_REQUEST),SAi2, TSi, TSr}

The server (IRAS) replies with:

HDR, SK {IDr, [CERT,] AUTH, CP(CFG_REPLY), SAr2, TSi, TSr}