API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 6311
[ACTIVE]

Protocol Support for High Availability of IKEv2/IPsec

Metadata

Publisher
IETF
Doc Type
Standard
Pages
26
Abstract
The IPsec protocol suite is widely used for business-critical network traffic. In order to make IPsec deployments highly available, more scalable, and failure-resistant, they are often implemented as IPsec High Availability (HA) clusters. However, there are many issues in IPsec HA clustering, and in particular in Internet Key Exchange Protocol version 2 (IKEv2) clustering. An earlier document, "IPsec Cluster Problem Statement", enumerates the issues encountered in the IKEv2/IPsec HA cluster environment. This document resolves these issues with the least possible change to the protocol. This document defines an extension to the IKEv2 protocol to solve the main issues of "IPsec Cluster Problem Statement" in the commonly deployed hot standby cluster, and provides implementation advice for other issues. The main issues solved are the synchronization of IKEv2 Message ID counters, and of IPsec replay counters. [STANDARDS-TRACK]
Publication Date
2011-07-01
Status Note
Proposed Standard
DOI
10.17487/RFC6311
Link
https://doi.org/10.17487/RFC6311
Author(s)
Rajeshwar Jenwar
Kalyani Garigipati
Yoav Nir
Yaron Sheffer
Dacheng Zhang
Keyword(s)
IPsec High Availability, Load Sharing, Clustering, Failover
Latest version of IETF RFC 6311

Document Versions — IETF RFC 6311

  • ▶ IETF RFC 6311 (2011-07-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6311.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 6311, Protocol Support for High Availability of IKEv2/IPsec. Available at https://doi.org/10.17487/RFC6311
Snippet:
IETF RFC 6311, Protocol Support for High Availability of IKEv2/IPsec. Available at https://doi.org/10.17487/RFC6311

HTML (ISO 690 compliant)

Preview:
IETF RFC 6311, Protocol Support for High Availability of IKEv2/IPsec. Available at https://doi.org/10.17487/RFC6311
Snippet:
<span class="citation"><cite>IETF RFC 6311</cite>, Protocol Support for High Availability of IKEv2/IPsec. Available at <a href="https://doi.org/10.17487/RFC6311" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6311</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 6311, Protocol Support for High Availability of IKEv2/IPsec
doi: 10.17487/RFC6311
url: https://doi.org/10.17487/RFC6311
Snippet:
<li>
<cite id="bib-rfc6311">IETF RFC 6311</cite>, Protocol Support for High Availability of IKEv2/IPsec
<span class="doi">10.17487/RFC6311</span>
</li>

Referenced By