Subject: RE: [dhcwg] dhcpv6-24: using IPsec to secure relay-agent <-> serv er messages

From: "Bernie Volz (EUD)" <[email-masked]>
Date: Wed, 8 May 2002 11:09:11 -0500

Yeah, we probably should be clear here that IPSEC can only be used when the DHCP server addresses are preconfigured in the Relay. IPSEC can not be used if the relay is using multicast addresses (at least not until the IPSEC issues with multicast are addressed).

- Bernie

-----Original Message-----
From: Thomas Narten [mailto:[email-masked]]
Sent: Wednesday, May 08, 2002 11:12 AM
To: [email-masked]
Subject: [dhcwg] dhcpv6-24: using IPsec to secure relay-agent <-> server
messages

> 21.2. Security of messages sent between servers and relay agents
> 
>    Relay agents and servers that choose to exchange messages securely
>    use the IPsec mechanisms for IPv6 [8].  The way in which IPsec
>    is employed by relay agents and servers is not specified in this
>    document.

I suspect that this will not get through the IESG as is. IPsec doesn't
work well with multicast. This is too underspecified.

Thomas

_______________________________________________
dhcwg mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/dhcwg