[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: CALL FOR DISCUSSION: DHCP over IKE vs Configuration Payload
I see this as both a pro and con.
PRO - it gets it done earlier, in terms of the exchange process, whereas the
doc we wrote has the more extensive DHCP config occuring after CHILD-SA;
only the basics are done in IKE.
CON - it makes IKE heavier, more bytes (the more config options returned,
the more bytes) and thus IKE will take longer time-wise to complete.
> -----Original Message-----
> From: Scott G. Kelly [mailto:scott@xxxxxxxxxxxxx]
> Sent: Monday, April 14, 2003 9:37 AM
> To: ipsec@xxxxxxxxxxxxxxxxx
> Subject: RE: CALL FOR DISCUSSION: DHCP over IKE vs
> Configuration Payload
> I think Darren's summary is pretty accurate. It's kind of a toss up.
> However, one difference that I note is that with the dhcp
> approach, all
> client config is (potentially) done prior to the instantiation of the
> child sa. I'm not sure if this is a benefit or not, but it might be.