2005-01-18 2011-12-19 Expert Review 0-33 Reserved 34 IKE_SA_INIT 35 IKE_AUTH 36 CREATE_CHILD_SA 37 INFORMATIONAL 38 IKE_SESSION_RESUME 39-239 Unassigned 240-255 Private use Expert Review 0 No Next Payload 1-32 Reserved 33 Security Association SA 34 Key Exchange KE 35 Identification - Initiator IDi 36 Identification - Responder IDr 37 Certificate CERT 38 Certificate Request CERTREQ 39 Authentication AUTH 40 Nonce Ni, Nr 41 Notify N 42 Delete D 43 Vendor ID V 44 Traffic Selector - Initiator TSi 45 Traffic Selector - Responder TSr 46 Encrypted and Authenticated SK 47 Configuration CP 48 Extensible Authentication EAP 49 Generic Secure Password Method GSPM 50-127 Unassigned 128-255 Private use Expert Review 0 Reserved 1 Encryption Algorithm (ENCR) (IKE and ESP) 2 Pseudo-random Function (PRF) (IKE) 3 Integrity Algorithm (INTEG) (IKE, AH, optional in ESP) 4 Diffie-Hellman Group (D-H) (IKE, optional in AH & ESP) 5 Extended Sequence Numbers (ESN) (AH and ESP) 6-240 Unassigned 241-255 Private use Expert Review 0-13 Reserved 14 Key Length (in bits) TV 15-17 Reserved 18-16383 Unassigned 16384-32767 Private use Expert Review 0 Reserved - 1 ENCR_DES_IV64 - 2 ENCR_DES 3 ENCR_3DES 4 ENCR_RC5 5 ENCR_IDEA 6 ENCR_CAST 7 ENCR_BLOWFISH 8 ENCR_3IDEA 9 ENCR_DES_IV32 - 10 Reserved - 11 ENCR_NULL Not allowed 12 ENCR_AES_CBC 13 ENCR_AES_CTR 14 ENCR_AES-CCM_8 15 ENCR-AES-CCM_12 16 ENCR-AES-CCM_16 17 Unassigned 18 AES-GCM with a 8 octet ICV 19 AES-GCM with a 12 octet ICV 20 AES-GCM with a 16 octet ICV 21 ENCR_NULL_AUTH_AES_GMAC Not allowed 22 Reserved for IEEE P1619 XTS-AES - 23 ENCR_CAMELLIA_CBC 24 ENCR_CAMELLIA_CTR - 25 ENCR_CAMELLIA_CCM with an 8-octet ICV - 26 ENCR_CAMELLIA_CCM with a 12-octet ICV - 27 ENCR_CAMELLIA_CCM with a 16-octet ICV - 28-1023 Unassigned 1024-65535 Private use Expert Review 0 Reserved 1 PRF_HMAC_MD5 2 PRF_HMAC_SHA1 3 PRF_HMAC_TIGER 4 PRF_AES128_XCBC 5 PRF_HMAC_SHA2_256 6 PRF_HMAC_SHA2_384 7 PRF_HMAC_SHA2_512 8 PRF_AES128_CMAC 9-1023 Unassigned 1024-65535 Private use Expert Review 0 NONE 1 AUTH_HMAC_MD5_96 2 AUTH_HMAC_SHA1_96 3 AUTH_DES_MAC 4 AUTH_KPDK_MD5 5 AUTH_AES_XCBC_96 6 AUTH_HMAC_MD5_128 7 AUTH_HMAC_SHA1_160 8 AUTH_AES_CMAC_96 9 AUTH_AES_128_GMAC 10 AUTH_AES_192_GMAC 11 AUTH_AES_256_GMAC 12 AUTH_HMAC_SHA2_256_128 13 AUTH_HMAC_SHA2_384_192 14 AUTH_HMAC_SHA2_512_256 15-1023 Unassigned 1024-65535 Private use Expert Review 0 NONE 1 Group 1 - 768-bit MODP Group 2 Group 2 - 1024-bit MODP Group 3-4 Reserved 5 1536-bit MODP Group 6-13 Unassigned 14 2048-bit MODP Group 15 3072-bit MODP Group 16 4096-bit MODP Group 17 6144-bit MODP Group 18 8192-bit MODP Group 19 256-bit random ECP group 20 384-bit random ECP group 21 521-bit random ECP group 22 1024-bit MODP Group with 160-bit Prime Order Subgroup 23 2048-bit MODP Group with 224-bit Prime Order Subgroup 24 2048-bit MODP Group with 256-bit Prime Order Subgroup 25 192-bit Random ECP Group 26 224-bit Random ECP Group 27-1023 Unassigned 1024-65535 Private use Expert Review 0 No Extended Sequence Numbers 1 Extended Sequence Numbers 2-65535 Reserved Expert Review 0 Reserved 1 ID_IPV4_ADDR 2 ID_FQDN 3 ID_RFC822_ADDR 4 Unassigned 5 ID_IPV6_ADDR 6-8 Unassigned 9 ID_DER_ASN1_DN 10 ID_DER_ASN1_GN 11 ID_KEY_ID 12 ID_FC_NAME 13-200 Unassigned 201-255 Private use Expert Review 0 Reserved 1 PKCS #7 wrapped X.509 certificate 2 PGP Certificate 3 DNS Signed Key 4 X.509 Certificate - Signature 5 Reserved 6 Kerberos Token 7 Certificate Revocation List (CRL) 8 Authority Revocation List (ARL) 9 SPKI Certificate 10 X.509 Certificate - Attribute 11 Raw RSA Key 12 Hash and URL of X.509 certificate 13 Hash and URL of X.509 bundle 14 OCSP Content 15-200 Unassigned 201-255 Private use Expert Review 0 Reserved 1 RSA Digital Signature 2 Shared Key Message Integrity Code 3 DSS Digital Signature 4-8 Unassigned 9 ECDSA with SHA-256 on the P-256 curve 10 ECDSA with SHA-384 on the P-384 curve 11 ECDSA with SHA-512 on the P-521 curve 12 Generic Secure Password Authentication Method 13-200 Unassigned 201-255 Private use 0-8191 Expert Review 8192-16383 Private use 0 Reserved 1 UNSUPPORTED_CRITICAL_PAYLOAD 2-3 Reserved 4 INVALID_IKE_SPI 5 INVALID_MAJOR_VERSION 6 Reserved 7 INVALID_SYNTAX 8 Reserved 9 INVALID_MESSAGE_ID 10 Reserved 11 INVALID_SPI 12-13 Reserved 14 NO_PROPOSAL_CHOSEN 15-16 Reserved 17 INVALID_KE_PAYLOAD 18-23 Reserved 24 AUTHENTICATION_FAILED 25-33 RESERVED 34 SINGLE_PAIR_REQUIRED 35 NO_ADDITIONAL_SAS 36 INTERNAL_ADDRESS_FAILURE 37 FAILED_CP_REQUIRED 38 TS_UNACCEPTABLE 39 INVALID_SELECTORS 40 UNACCEPTABLE_ADDRESSES 41 UNEXPECTED_NAT_DETECTED 42 USE_ASSIGNED_HoA 43 TEMPORARY_FAILURE 44 CHILD_SA_NOT_FOUND 45-8191 Unassigned 8192-16383 Private use 16384-40959 Expert Review 40960-65535 Private use 16384 INITIAL_CONTACT 16385 SET_WINDOW_SIZE 16386 ADDITIONAL_TS_POSSIBLE 16387 IPCOMP_SUPPORTED 16388 NAT_DETECTION_SOURCE_IP 16389 NAT_DETECTION_DESTINATION_IP 16390 COOKIE 16391 USE_TRANSPORT_MODE 16392 HTTP_CERT_LOOKUP_SUPPORTED 16393 REKEY_SA 16394 ESP_TFC_PADDING_NOT_SUPPORTED 16395 NON_FIRST_FRAGMENTS_ALSO 16396 MOBIKE_SUPPORTED 16397 ADDITIONAL_IP4_ADDRESS 16398 ADDITIONAL_IP6_ADDRESS 16399 NO_ADDITIONAL_ADDRESSES 16400 UPDATE_SA_ADDRESSES 16401 COOKIE2 16402 NO_NATS_ALLOWED 16403 AUTH_LIFETIME 16404 MULTIPLE_AUTH_SUPPORTED 16405 ANOTHER_AUTH_FOLLOWS 16406 REDIRECT_SUPPORTED 16407 REDIRECT 16408 REDIRECTED_FROM 16409 TICKET_LT_OPAQUE 16410 TICKET_REQUEST 16411 TICKET_ACK 16412 TICKET_NACK 16413 TICKET_OPAQUE 16414 LINK_ID 16415 USE_WESP_MODE 16416 ROHC_SUPPORTED 16417 EAP_ONLY_AUTHENTICATION 16418 CHILDLESS_IKEV2_SUPPORTED 16419 QUICK_CRASH_DETECTION 16420 IKEV2_MESSAGE_ID_SYNC_SUPPORTED 16421 IPSEC_REPLAY_COUNTER_SYNC_SUPPORTED 16422 IKEV2_MESSAGE_ID_SYNC 16423 IPSEC_REPLAY_COUNTER_SYNC 16424 SECURE_PASSWORD_METHODS 16425-40959 Unassigned 40960-65535 Private use Expert Review 0 Reserved 1 IPCOMP_OUI 2 IPCOMP_DEFLATE 3 IPCOMP_LZS 4 IPCOMP_LZJH 5-240 Unassigned 241-255 Private use Expert Review 0 Reserved 1 IKE 2 AH 3 ESP 4 FC_ESP_HEADER 5 FC_CT_AUTHENTICATION 6-200 Unassigned 201-255 Private use Expert Review 0-6 Reserved 7 TS_IPV4_ADDR_RANGE 8 TS_IPV6_ADDR_RANGE 9 TS_FC_ADDR_RANGE 10-240 Unassigned 241-255 Private use Expert Review 0 Reserved 1 CFG_REQUEST 2 CFG_REPLY 3 CFG_SET 4 CFG_ACK 5-127 Unassigned 128-255 Private use Expert Review Attribute Types with an "*" may be multi-valued on return only if multiple values were requested. 0 Reserved 1 INTERNAL_IP4_ADDRESS YES* 0 or 4 octets 2 INTERNAL_IP4_NETMASK NO 0 or 4 octets 3 INTERNAL_IP4_DNS YES 0 or 4 octets 4 INTERNAL_IP4_NBNS YES 0 or 4 octets 5 Reserved 6 INTERNAL_IP4_DHCP YES 0 or 4 octets 7 APPLICATION_VERSION NO 0 or more 8 INTERNAL_IP6_ADDRESS YES* 0 or 17 octets 9 Reserved 10 INTERNAL_IP6_DNS YES 0 or 16 octets 11 Reserved 12 INTERNAL_IP6_DHCP YES 0 or 16 octets 13 INTERNAL_IP4_SUBNET YES 0 or 8 octets 14 SUPPORTED_ATTRIBUTES NO Multiple of 2 15 INTERNAL_IP6_SUBNET YES 17 octets 16 MIP6_HOME_PREFIX YES 0 or 21 octets 17 INTERNAL_IP6_LINK NO 8 or more 18 INTERNAL_IP6_PREFIX YES 17 octets 19 HOME_AGENT_ADDRESS NO 16 or 20 20-16383 Unassigned 16384-32767 Private Use Expert Review 0 Reserved 1 IPv4 address of the VPN gateway 2 IPv6 address of the VPN gateway 3 FQDN of the VPN gateway 4-240 Unassigned 241-255 Reserved for Private Use Expert Review 0 Reserved 1 Maximum Context Identifier (MAX_CID) TV 2 ROHC Profile (ROHC_PROFILE) TV 3 ROHC Integrity Algorithm (ROHC_INTEG) TV 4 ROHC ICV Length in bytes (ROHC_ICV_LEN) TV 5 Maximum Reconstructed Reception Unit (MRRU) TV 6-16383 Unassigned 16384-32767 Reserved for Private Use Expert Review 0 Reserved 1-1023 Unassigned 1024-65535 Reserved for Private Use John Meredith mailto:john.meredith&etsi.org 2010-05-17 Matt Ball mailto:matt.ball&ieee.org 2007-10-11