Appendix D
RFC 2405 The ESP DES-CBC Cipher Algorithm With Explicit IV
RFC 2410 The NULL Encryption Algorithm and Its Use With IPsec
RFC 2451 The ESP CBC-Mode Cipher Algorithms
RFC 2521 ICMP Security Failures Messages
RFC 3566 The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec
RFC 3602 The AES-CBC Cipher Algorithm and Its Use with IPsec
RFC 3686 Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)
RFC 4196 The SEED Cipher Algorithm and Its Use with IPsec
RFC 4106 The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)
RFC 4305 Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH)
RFC 4307 Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2) RFC 4308 Cryptographic Suites for IPsec
RFC 4309 Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP)
Dead Peer Detection RFCs
RFC 3706 A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers
NAT-Traversal and UDP Encapsulation RFCs
RFC 2709 Security Model with Tunnel-mode IPsec for NAT Domains
RFC 3715 IPsec Network Address Translation (NAT) Compatibility Requirements RFC 3947 Negotiation of NAT-Traversal in the IKE
RFC 3948 UDP Encapsulation of IPsec ESP Packets
323
IPsec-Related Requests For Comments (RFCs)
RFCs for Secure DNS Service, which IPSEC May Use
RFC 2137 Secure Domain Name System Dynamic Update
RFC 2230 Key Exchange Delegation Record for the DNS
RFC 2535 Domain Name System Security Extensions
RFC 2536 DSA KEYs and SIGs in the Domain Name System (DNS)
RFC 2537 RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)
RFC 2538 Storing Certificates in the Domain Name System (DNS)
RFC 2539 Storage of Diffie-Hellman Keys in the Domain Name System (DNS) RFC 3007 Secure Domain Name System (DNS) Dynamic Update
RFC 3008 Domain Name System Security (DNSSEC) Signing Authority [obsoleted] RFC 3130 Notes from the State-Of-The-Technology: DNSSEC
RFC 3225 Indicating Resolver Support of DNSSEC
RFC 3226 DNSSEC and IPv6 A6 aware server/resolver message size requirements
RFC 3757 Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag [obsoleted]
RFC 3845 DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format [obsoleted] RFC 4025 A Method for Storing IPsec Keying Material in DNS
RFC 4033 DNS Security Introduction and Requirements
RFC 4034 Resource Records for the DNS Security Extensions
RFC 4035 Protocol Modifications for the DNS Security Extensions
RFC 4322 Opportunistic Encryption using the Internet Key Exchange (IKE)
RFCs Related to L2TP, Often Used in Combination with IPsec
RFC 2341 Cisco Layer Two Forwarding (Protocol) "L2F". (A predecessor to L2TP) RFC 2637 Point-to-Point Tunneling Protocol (PPTP). (A predecessor to L2TP) RFC 2661 Layer Two Tunneling Protocol "L2TP"
RFC 2809 Implementation of L2TP Compulsory Tunneling via RADIUS
324
Appendix D
RFC 2888 Secure Remote Access with L2TP
RFC 3070 Layer Two Tunneling Protocol (L2TP) over Frame Relay
RFC 3145 L2TP Disconnect Cause Information
RFC 3193 Securing L2TP using IPsec
RFC 3301 Layer Two Tunneling Protocol (L2TP): ATM access network
RFC 3308 Layer Two Tunneling Protocol (L2TP) Differentiated Services
RFC 3355 Layer Two Tunneling Protocol (L2TP) Over ATM Adaptation Layer 5 (AAL5) RFC 3371 Layer Two Tunneling Protocol "L2TP" Management Information Base
RFC 3437 Layer Two Tunneling Protocol Extensions for PPP Link Control Protocol Negotiation
RFC 3438 Layer Two Tunneling Protocol (L2TP) Internet Assigned Numbers: Internet Assigned Numbers Authority (IANA) Considerations Update
RFC 3573 Signaling of Modem-On-Hold status in Layer 2 Tunneling Protocol (L2TP)
RFC 3817 Layer 2 Tunneling Protocol (L2TP) Active Discovery Relay for PPP over Ethernet (PPPoE)
RFCs on IPsec in Relation to Other Protocols
RFC 2207 RSVP Extensions for IPSEC Data Flows
RFC 2521 ICMP Security Failures Messages
RFC 3104 RSIP Support for End-to-end IPsec
RFC 3554 On the Use of Stream Control Transmission Protocol (SCTP) with IPsec
RFC 3776 Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents RFC 3884 Use of IPsec Transport Mode for Dynamic Routing
RFCs Not in Use or Implemented across Multiple Vendors
RFC 2522 Photuris: Session-Key Management Protocol
RFC 2523 Photuris: Extended Schemes and Attributes
RFC 3456 Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode
325