…r is familiar with the Internet Protocol, the IPsec suite of protocols (e.g., [ RFC2401 ]), related networking technology, and general security terms and concepts. 1.4 . Terminology The following key terms are used throughout this document. 1-to-N A group which has one sender and…
… of transport (or higher) layer security. Network (IP) layer security (IPsec) [ RFC2401 ], on the other hand, can generally be used by any application, transparently to the application. Border, et al. Informational [Page 14] RFC 3135 PILC - Performance Enhancing Proxies June 2001…
…c This document does not take a stance on the placement of IP Security (IPsec) [RFC2401], which logically sits between IP and the Packetization Layer. A PLPMTUD implementation can treat IPsec either as part of IP or as part of the Packetization Layer, as long as the accounting is…
… are faced with a number of unsatisfactory choices. First, they can use IPsec [ RFC2401 ]. However, for a number of reasons detailed in [ WHYIPSEC ], this is only suitable for some applications. Second, they can design a custom application layer security protocol. SIP, for instan…
…ler/key server" (GCKS), which establishes security associations [ Section 4.6.2 RFC2401 ] among authorized group members. ISAKMP defines two "phases" of negotiation [p.16 RFC2408 ]. The GDOI MUST be protected by a Phase 1 security association. This document incorporates the Phase…
… of transport (or higher) layer security. Network (IP) layer security (IPsec) [ RFC2401 ], on the other hand, can generally be used by any application, transparently to the application. Border, et al. Informational [Page 14] RFC 3135 PILC - Performance Enhancing Proxies June 2001…
…blems. Firewalls are often misconfigured to suppress all ICMP messages. IPsec [ RFC2401 ] and IP-in-IP [ RFC2003 ] tunnels shouldn't cause these sorts of problems, if the implementations follow the advice in the appropriate documents. PMTUD, as documented in [ RFC1191 ], fails wh…
…., "Report of the IAB Security Architecture Workshop", RFC 2316 , April 1998. [ RFC2401 ] Kent, S. and R. Atkinson, "Security Architecture for the Internet Protocol", RFC 2401 , November 1998. [ RFC 3040 ] Cooper, I., Melve, I. and G. Tomlinson, "Internet Web Replication and Cach…
…blems. Firewalls are often misconfigured to suppress all ICMP messages. IPsec [ RFC2401 ] and IP-in-IP [ RFC2003 ] tunnels shouldn't cause these sorts of problems, if the implementations follow the advice in the appropriate documents. PMTUD, as documented in [ RFC1191 ], fails wh…