API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Preference is stored in this browser only.

IETF RFC 5998
[ACTIVE]

An Extension for EAP-Only Authentication in IKEv2

Metadata

Publisher
IETF
Doc Type
Standard
Pages
16
Abstract
IKEv2 specifies that Extensible Authentication Protocol (EAP) authentication must be used together with responder authentication based on public key signatures. This is necessary with old EAP methods that provide only unilateral authentication using, e.g., one- time passwords or token cards. This document specifies how EAP methods that provide mutual authentication and key agreement can be used to provide extensible responder authentication for IKEv2 based on methods other than public key signatures. [STANDARDS-TRACK]
Publication Date
2010-09-01
Status Note
Proposed Standard
DOI
10.17487/RFC5998
Link
https://doi.org/10.17487/RFC5998
Author(s)
Pasi Eronen
Hannes Tschofenig
Yaron Sheffer
Keyword(s)
Mutual Authentication, AAA, Key Agreement, Channel Binding
Latest version of IETF RFC 5998

Document Versions — IETF RFC 5998

  • ▶ IETF RFC 5998 (2010-09-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • IEEE.STD802.1X.2001 — IEEE8021X EXTERNAL
  • IEEE.STD802.11I.2004 — IEEE802.11i EXTERNAL
  • Arkko, J. and P. Eronen, "Authenticated Service Information for the Extensible Authentication Protocol (EAP)", Work in Progress, October 2005. EXTERNAL
  • Clancy, C., Lior, A., Zorn, G., and K. Hoeper, "EAP Method Support for Transporting AAA Payloads", Work in Progress, May 2010. EXTERNAL
  • Carlson, J., Aboba, B., and H. Haverinen, "EAP SRP- SHA1 Authentication Protocol", Work in Progress, July 2001. EXTERNAL
  • Sheffer, Y., Zorn, G., Tschofenig, H., and S. Fluhrer, "An EAP Authentication Method Based on the EKE Protocol", Work in Progress, August 2010. EXTERNAL
  • IETF RFC 1661 [Active*]
  • IETF RFC 3579 [Active*]
  • IETF RFC 4072 [Active*]
  • IETF RFC 4186 [Active*]
  • IETF RFC 4187 [Active*]
  • RFC4746 — RFC4746 EXTERNAL
  • IETF RFC 4763 [Active*]
  • RFC4793 — RFC4793 EXTERNAL
  • IETF RFC 4851 [Active*]
  • IETF RFC 5216 [Active*]
  • IETF RFC 5247 [Active*]
  • IETF RFC 5281 [Active*]
  • RFC5433 — RFC5433 EXTERNAL
  • IETF RFC 5448 [Active*]
  • IETF RFC 5931 [Active*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5998.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998
Snippet:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998

HTML (ISO 690 compliant)

Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998
Snippet:
<span class="citation"><cite>IETF RFC 5998</cite>, An Extension for EAP-Only Authentication in IKEv2. Available at <a href="https://doi.org/10.17487/RFC5998" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5998</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2
doi: 10.17487/RFC5998
url: https://doi.org/10.17487/RFC5998
Snippet:
<li>
<cite id="bib-rfc5998">IETF RFC 5998</cite>, An Extension for EAP-Only Authentication in IKEv2
<span class="doi">10.17487/RFC5998</span>
</li>

Referenced By