%% You should probably cite rfc9478 instead of this I-D. @techreport{ietf-ipsecme-labeled-ipsec-02, number = {draft-ietf-ipsecme-labeled-ipsec-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-ipsecme-labeled-ipsec/02/}, author = {Paul Wouters and Sahana Prasad}, title = {{Labeled IPsec Traffic Selector support for IKEv2}}, pagetotal = 8, year = 2019, month = nov, day = 4, abstract = {This document defines a new Traffic Selector (TS) Type for Internet Key Exchange version 2 to add support for negotiating Mandatory Access Control (MAC) security labels as a traffic selector of the Security Policy Database (SPD). Security Labels for IPsec are also known as "Labeled IPsec". The new TS type is TS\_SECLABEL, which consists of a variable length opaque field specifying the security label. This document updates the IKEv2 TS negotiation specified in RFC 7296 Section 2.9.}, }