RFC 3706: A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers

In plain English — editorial summary, not part of the RFC

This document describes the method detecting a dead Internet Key Exchange (IKE) peer that is presently in use by a number of vendors. The method, called Dead Peer Detection (DPD) uses IPSec traffic patterns to minimize the number of IKE messages that are needed to confirm liveness. DPD, like other keepalive mechanisms, is needed to determine when to perform IKE peer failover, and to reclaim lost resources. This memo provides information for the Internet community.

Document record

Document ID

RFC3706

Published

February 2004

Authors

G. Huang; S. Beaulieu; D. Rochefort

Status

INFORMATIONAL

Stream

IETF

Area

sec

Pages

13

Also known as

—

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC3706
• Reported errata exist →

Topics

• security authentication
• dead peer detection
• dpd
• keepalive

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 3379Delegated Path Validation and Delegated Path Discovery Protocol RequirementsCurrent

  September 2002

• RFC 3709Internet X.509 Public Key Infrastructure: Logotypes in X.509 CertificatesObsoleted

  February 2004

• RFC 3715IPsec-Network Address Translation (NAT) Compatibility RequirementsCurrent

  March 2004

• RFC 3686Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)Current

  January 2004

• RFC 3739Internet X.509 Public Key Infrastructure: Qualified Certificates ProfileCurrent

  March 2004

• RFC 3740The Multicast Group Security ArchitectureCurrent

  March 2004

• RFC 3741Exclusive XML Canonicalization, Version 1.0Current

  March 2004

• RFC 3664The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE)Obsoleted

  January 2004

Also filed under

• INFORMATIONAL
• 2004
• IETF stream
• sec area