[148062] in North American Network Operators' Group
Does anybody out there use Authentication Header (AH)?
daemon@ATHENA.MIT.EDU (John Smith)
Sun Jan 1 19:13:12 2012
Date: Mon, 2 Jan 2012 00:12:18 +0000 (GMT)
From: John Smith <jsmith4112003@yahoo.co.uk>
To: "nanog@nanog.org" <nanog@nanog.org>
Reply-To: John Smith <jsmith4112003@yahoo.co.uk>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi,=0A=0AI am trying to see if there are people who use AH specially since =
RFC 4301 has a MAY for AH and a MUST for ESP-NULL. While operators may not =
care about a MAY or a MUST in an RFC, but the IETF protocols and vendors do=
. So all protocols that require IPsec for authentication implicitly have a =
MAY for AH and a MUST for ESP-NULL.=0A=0AGiven that there is hardly a diffe=
rence between the two, I am trying to understand the scenarios where people=
might want to use AH? OR is it that people dont care and just use what the=
ir vendors provide them?=0A=0ARegards,=0AJohn