An Extension for EAP-Only Authentication in IKEv2
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 16
- Abstract
- IKEv2 specifies that Extensible Authentication Protocol (EAP) authentication must be used together with responder authentication based on public key signatures. This is necessary with old EAP methods that provide only unilateral authentication using, e.g., one- time passwords or token cards. This document specifies how EAP methods that provide mutual authentication and key agreement can be used to provide extensible responder authentication for IKEv2 based on methods other than public key signatures. [STANDARDS-TRACK]
- Publication Date
- 2010-09-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5998- Link
- https://doi.org/10.17487/RFC5998
- Author(s)
- Pasi EronenHannes TschofenigYaron Sheffer
- Keyword(s)
- Mutual Authentication, AAA, Key Agreement, Channel Binding
Latest version of IETF RFC 5998
Document Versions — IETF RFC 5998
-
▶ IETF RFC 5998 (2010-09-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3748 [Active*]
- IETF RFC 4306 [Superseded*]
- RFC5723 — RFC5723 EXTERNAL
- IETF RFC 5996 [Superseded*]
Bibliographic Reference(s)
- IEEE.STD802.1X.2001 — IEEE8021X EXTERNAL
- IEEE.STD802.11I.2004 — IEEE802.11i EXTERNAL
- Arkko, J. and P. Eronen, "Authenticated Service Information for the Extensible Authentication Protocol (EAP)", Work in Progress, October 2005. EXTERNAL
- Clancy, C., Lior, A., Zorn, G., and K. Hoeper, "EAP Method Support for Transporting AAA Payloads", Work in Progress, May 2010. EXTERNAL
- Carlson, J., Aboba, B., and H. Haverinen, "EAP SRP- SHA1 Authentication Protocol", Work in Progress, July 2001. EXTERNAL
- Sheffer, Y., Zorn, G., Tschofenig, H., and S. Fluhrer, "An EAP Authentication Method Based on the EKE Protocol", Work in Progress, August 2010. EXTERNAL
- IETF RFC 1661 [Active*]
- IETF RFC 3579 [Active*]
- IETF RFC 4072 [Active*]
- IETF RFC 4186 [Active*]
- IETF RFC 4187 [Active*]
- RFC4746 — RFC4746 EXTERNAL
- IETF RFC 4763 [Active*]
- RFC4793 — RFC4793 EXTERNAL
- IETF RFC 4851 [Active*]
- IETF RFC 5216 [Active*]
- IETF RFC 5247 [Active*]
- IETF RFC 5281 [Active*]
- RFC5433 — RFC5433 EXTERNAL
- IETF RFC 5448 [Active*]
- IETF RFC 5931 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5998.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998
Snippet:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998
HTML (ISO 690 compliant)
Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2. Available at https://doi.org/10.17487/RFC5998
Snippet:
<span class="citation"><cite>IETF RFC 5998</cite>, An Extension for EAP-Only Authentication in IKEv2. Available at <a href="https://doi.org/10.17487/RFC5998" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5998</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5998, An Extension for EAP-Only Authentication in IKEv2
doi: 10.17487/RFC5998
url: https://doi.org/10.17487/RFC5998
doi: 10.17487/RFC5998
url: https://doi.org/10.17487/RFC5998
Snippet:
<li> <cite id="bib-rfc5998">IETF RFC 5998</cite>, An Extension for EAP-Only Authentication in IKEv2 <span class="doi">10.17487/RFC5998</span> </li>
Referenced By
- IETF RFC 6071 [Active*]
- IETF RFC 9838 [Active*]