@techreport{srisuresh-ike-policy-extensions-00, number = {draft-srisuresh-ike-policy-extensions-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-srisuresh-ike-policy-extensions/00/}, author = {Pyda Srisuresh and J Vilhuber}, title = {{IKE extensions to support Dynamic Policies}}, pagetotal = 18, year = 2001, month = jan, day = 25, abstract = {As IPsec is widely deployed, there is increasing need to negotiate security keys using IKE at application level granularity. IKE, as currently proposed, has restrictions in negotiating keys for applications with bundled sessions and complex policies. The draft identifies the problem with IKE and suggests extensions to make IKE application and policy friendly. The proposed solution suggests extensions to the conceptual operation of IPsec as well as IKE, but does not require changes to existing IKE payloads. The document introduces a new policy payload that complements existing IKE payloads and suggests replacing ID payload with the Policy payload, in Quick mode.}, }