Internet Key Exchange Version 2 (IKEv2) Parameters

Created: 2005-01-18
Last Updated: 2023-05-23
Available Formats: XML
HTML
Plain text

Registries included below

IKEv2 Exchange Types
IKEv2 Payload Types
Transform Type Values
IKEv2 Identification Payload ID Types
IKEv2 Certificate Encodings
IKEv2 Authentication Method
IKEv2 Notify Message Types - Error Types
IKEv2 Notify Message Types - Status Types
IKEv2 Notification IPCOMP Transform IDs (Value 16387)
IKEv2 Security Protocol Identifiers
IKEv2 Traffic Selector Types
IKEv2 Configuration Payload CFG Types
IKEv2 Configuration Payload Attribute Types
IKEv2 Gateway Identity Types
ROHC Attribute Types
IKEv2 Secure Password Methods
IKEv2 Hash Algorithms
IKEv2 Post-quantum Preshared Key ID Types

IKEv2 Exchange Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	Exchange Type	Reference
0-33	Reserved	[RFC7296]
34	IKE_SA_INIT	[RFC7296]
35	IKE_AUTH	[RFC7296]
36	CREATE_CHILD_SA	[RFC7296]
37	INFORMATIONAL	[RFC7296]
38	IKE_SESSION_RESUME	[RFC5723]
39	GSA_AUTH	[draft-yeung-g-ikev2]
40	GSA_REGISTRATION	[draft-yeung-g-ikev2]
41	GSA_REKEY	[draft-yeung-g-ikev2]
42	Unassigned
43	IKE_INTERMEDIATE	[RFC9242]
44	IKE_FOLLOWUP_KE	[RFC9370]
45-239	Unassigned
240-255	Private use	[RFC7296]

IKEv2 Payload Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	Next Payload Type	Notation	Reference
0	No Next Payload		[RFC7296]
1-32	Reserved		[RFC7296]
33	Security Association	SA	[RFC7296]
34	Key Exchange	KE	[RFC7296]
35	Identification - Initiator	IDi	[RFC7296]
36	Identification - Responder	IDr	[RFC7296]
37	Certificate	CERT	[RFC7296]
38	Certificate Request	CERTREQ	[RFC7296]
39	Authentication	AUTH	[RFC7296]
40	Nonce	Ni, Nr	[RFC7296]
41	Notify	N	[RFC7296]
42	Delete	D	[RFC7296]
43	Vendor ID	V	[RFC7296]
44	Traffic Selector - Initiator	TSi	[RFC7296]
45	Traffic Selector - Responder	TSr	[RFC7296]
46	Encrypted and Authenticated	SK	[RFC7296]
47	Configuration	CP	[RFC7296]
48	Extensible Authentication	EAP	[RFC7296]
49	Generic Secure Password Method	GSPM	[RFC6467]
50	Group Identification	IDg	[draft-yeung-g-ikev2]
51	Group Security Association	GSA	[draft-yeung-g-ikev2]
52	Key Download	KD	[draft-yeung-g-ikev2]
53	Encrypted and Authenticated Fragment	SKF	[RFC7383]
54	Puzzle Solution	PS	[RFC8019]
55-127	Unassigned
128-255	Private use		[RFC7296]

Transform Type Values

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296][RFC9370]

Note

"Key Exchange Method (KE)" transform type was originally 
named "Diffie-Hellman Group (D-H)" and was referenced by
that name in a number of RFCs published prior
to [RFC9370], which gave it the current title.

Note

All "Additional Key Exchange (ADDKE)" entries use the same
"Transform Type 4 - Key Exchange Method Transform IDs"
registry as the "Key Exchange Method (KE)" entry.

Available Formats

CSV

Type	Description	Used In	Reference
0	Reserved		[RFC7296]
1	Encryption Algorithm (ENCR)	(IKE and ESP)	[RFC7296]
2	Pseudo-random Function (PRF)	(IKE)	[RFC7296]
3	Integrity Algorithm (INTEG)	(IKE, AH, optional in ESP)	[RFC7296]
4	Key Exchange Method (KE)	(IKE, optional in AH & ESP)	[RFC7296][RFC9370]
5	Extended Sequence Numbers (ESN)	(AH and ESP)	[RFC7296]
6	Additional Key Exchange 1 (ADDKE1)	(optional in IKE, AH, ESP)	[RFC9370]
7	Additional Key Exchange 2 (ADDKE2)	(optional in IKE, AH, ESP)	[RFC9370]
8	Additional Key Exchange 3 (ADDKE3)	(optional in IKE, AH, ESP)	[RFC9370]
9	Additional Key Exchange 4 (ADDKE4)	(optional in IKE, AH, ESP)	[RFC9370]
10	Additional Key Exchange 5 (ADDKE5)	(optional in IKE, AH, ESP)	[RFC9370]
11	Additional Key Exchange 6 (ADDKE6)	(optional in IKE, AH, ESP)	[RFC9370]
12	Additional Key Exchange 7 (ADDKE7)	(optional in IKE, AH, ESP)	[RFC9370]
13-240	Unassigned
241-255	Private use		[RFC7296]

IKEv2 Transform Attribute Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	Attribute Type	Format	Reference
0-13	Reserved		[RFC7296]
14	Key Length (in bits)	TV	[RFC7296]
15-17	Reserved		[RFC7296]
18-16383	Unassigned
16384-32767	Private use		[RFC7296]

Transform Type 1 - Encryption Algorithm Transform IDs

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296][RFC9395]

Note

To find out requirement levels for encryption algorithms for
ESP, see [RFC8221]. For IKEv2, see [RFC8247].

Available Formats

CSV

Number	Name	Status	ESP Reference	IKEv2 Reference
0	Reserved		[RFC7296]	-
1	ENCR_DES_IV64	DEPRECATED [RFC9395]	UNSPECIFIED	-
2	ENCR_DES	DEPRECATED [RFC8247]	[RFC2405]	[RFC7296]
3	ENCR_3DES		[RFC2451]	[RFC7296]
4	ENCR_RC5	DEPRECATED [RFC9395]	[RFC2451]	[RFC7296]
5	ENCR_IDEA	DEPRECATED [RFC9395]	[RFC2451]	[RFC7296]
6	ENCR_CAST	DEPRECATED [RFC9395]	[RFC2451]	[RFC7296]
7	ENCR_BLOWFISH	DEPRECATED [RFC9395]	[RFC2451]	[RFC7296]
8	ENCR_3IDEA	DEPRECATED [RFC9395]	UNSPECIFIED	[RFC7296]
9	ENCR_DES_IV32	DEPRECATED [RFC9395]	UNSPECIFIED	-
10	Reserved		[RFC7296]	-
11	ENCR_NULL		[RFC2410]	Not allowed
12	ENCR_AES_CBC		[RFC3602]	[RFC7296]
13	ENCR_AES_CTR		[RFC3686]	[RFC5930]
14	ENCR_AES_CCM_8		[RFC4309]	[RFC5282]
15	ENCR_AES_CCM_12		[RFC4309]	[RFC5282]
16	ENCR_AES_CCM_16		[RFC4309]	[RFC5282]
17	Unassigned
18	ENCR_AES_GCM_8		[RFC4106] [RFC8247]	[RFC5282] [RFC8247]
19	ENCR_AES_GCM_12		[RFC4106] [RFC8247]	[RFC5282] [RFC8247]
20	ENCR_AES_GCM_16		[RFC4106] [RFC8247]	[RFC5282] [RFC8247]
21	ENCR_NULL_AUTH_AES_GMAC		[RFC4543]	Not allowed
22	Reserved for IEEE P1619 XTS-AES		[Matt_Ball]	-
23	ENCR_CAMELLIA_CBC		[RFC5529]	[RFC7296]
24	ENCR_CAMELLIA_CTR		[RFC5529]	-
25	ENCR_CAMELLIA_CCM_8		[RFC5529] [RFC8247]	-
26	ENCR_CAMELLIA_CCM_12		[RFC5529] [RFC8247]	-
27	ENCR_CAMELLIA_CCM_16		[RFC5529] [RFC8247]	-
28	ENCR_CHACHA20_POLY1305		[RFC7634]	[RFC7634]
29	ENCR_AES_CCM_8_IIV		[RFC8750]	Not allowed
30	ENCR_AES_GCM_16_IIV		[RFC8750]	Not allowed
31	ENCR_CHACHA20_POLY1305_IIV		[RFC8750]	Not allowed
32	ENCR_KUZNYECHIK_MGM_KTREE		[RFC9227]	[RFC9227]
33	ENCR_MAGMA_MGM_KTREE		[RFC9227]	[RFC9227]
34	ENCR_KUZNYECHIK_MGM_MAC_KTREE		[RFC9227]	Not allowed
35	ENCR_MAGMA_MGM_MAC_KTREE		[RFC9227]	Not allowed
36-1023	Unassigned
1024-65535	Private use		[RFC7296]	[RFC7296]

Transform Type 2 - Pseudorandom Function Transform IDs

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296][RFC9395]

Note

To find out requirement levels for PRFs for IKEv2, see [RFC8247].

Available Formats

CSV

Number	Name	Status	Reference
0	Reserved		[RFC7296]
1	PRF_HMAC_MD5	DEPRECATED [RFC8247]	[RFC2104]
2	PRF_HMAC_SHA1		[RFC2104]
3	PRF_HMAC_TIGER	DEPRECATED [RFC9395]	[UNSPECIFIED]
4	PRF_AES128_XCBC		[RFC4434]
5	PRF_HMAC_SHA2_256		[RFC4868]
6	PRF_HMAC_SHA2_384		[RFC4868]
7	PRF_HMAC_SHA2_512		[RFC4868]
8	PRF_AES128_CMAC		[RFC4615]
9	PRF_HMAC_STREEBOG_512		[RFC9385]
10-1023	Unassigned
1024-65535	Private use		[RFC7296]

Transform Type 3 - Integrity Algorithm Transform IDs

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296][RFC9395]

Note

To find out requirement levels for encryption algorithms for
ESP/AH, see [RFC8221]. For IKEv2, see [RFC8247].

Available Formats

CSV

Number	Name	Status	Reference
0	NONE		[RFC7296]
1	AUTH_HMAC_MD5_96	DEPRECATED [RFC8247]	[RFC2403][RFC7296]
2	AUTH_HMAC_SHA1_96		[RFC2404][RFC7296]
3	AUTH_DES_MAC	DEPRECATED [RFC8247]	[UNSPECIFIED]
4	AUTH_KPDK_MD5	DEPRECATED [RFC8247]	[UNSPECIFIED]
5	AUTH_AES_XCBC_96		[RFC3566][RFC7296]
6	AUTH_HMAC_MD5_128	DEPRECATED [RFC9395]	[RFC4595]
7	AUTH_HMAC_SHA1_160	DEPRECATED [RFC9395]	[RFC4595]
8	AUTH_AES_CMAC_96		[RFC4494]
9	AUTH_AES_128_GMAC		[RFC4543]
10	AUTH_AES_192_GMAC		[RFC4543]
11	AUTH_AES_256_GMAC		[RFC4543]
12	AUTH_HMAC_SHA2_256_128		[RFC4868]
13	AUTH_HMAC_SHA2_384_192		[RFC4868]
14	AUTH_HMAC_SHA2_512_256		[RFC4868]
15-1023	Unassigned
1024-65535	Private use		[RFC7296]

Transform Type 4 - Key Exchange Method Transform IDs

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296][RFC6989][RFC9370][RFC9395]

Note

This registry was originally named "Transform Type 4 -
Diffie-Hellman Group Transform IDs" and was referenced
using that name in a number of RFCs published prior to
[RFC9370], which gave it its current title.

Note

This registry is used by the "Key Exchange Method (KE)"
transform type and by all "Additional Key Exchange (ADDKE)"
transform types.

Note

To find out requirement levels for key exchange methods
for IKEv2, see [RFC8247].

Note

The instructions for the designated experts are described
in [RFC9370]. While adding
new Key Exchange (KE) methods, the following considerations 
must be applied. A key exchange method must take exactly one 
round trip (one IKEv2 exchange) and at the end of this 
exchange, both peers must be able to derive the shared 
secret. In addition, any public value that peers
exchanged during a key exchange method must fit into a
single IKEv2 payload. If these restrictions are not met
for a key exchange method, then there must be documentation
on how this key exchange method is used in IKEv2.

Available Formats

CSV

Number	Name	Status	Recipient Tests	Reference
0	NONE			[RFC7296]
1	768-bit MODP Group	DEPRECATED [RFC8247]	[RFC6989], Sec. 2.1	[RFC7296]
2	1024-bit MODP Group		[RFC6989], Sec. 2.1	[RFC7296]
3-4	Reserved			[RFC7296]
5	1536-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
6-13	Unassigned			[RFC7296]
14	2048-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
15	3072-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
16	4096-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
17	6144-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
18	8192-bit MODP Group		[RFC6989], Sec. 2.1	[RFC3526]
19	256-bit random ECP group		[RFC6989], Sec. 2.3	[RFC5903]
20	384-bit random ECP group		[RFC6989], Sec. 2.3	[RFC5903]
21	521-bit random ECP group		[RFC6989], Sec. 2.3	[RFC5903]
22	1024-bit MODP Group with 160-bit Prime Order Subgroup	DEPRECATED [RFC8247]	[RFC6989], Sec. 2.2	[RFC5114]
23	2048-bit MODP Group with 224-bit Prime Order Subgroup		[RFC6989], Sec. 2.2	[RFC5114]
24	2048-bit MODP Group with 256-bit Prime Order Subgroup		[RFC6989], Sec. 2.2	[RFC5114]
25	192-bit Random ECP Group		[RFC6989], Sec. 2.3	[RFC5114]
26	224-bit Random ECP Group		[RFC6989], Sec. 2.3	[RFC5114]
27	brainpoolP224r1		[RFC6989], Sec. 2.3	[RFC6954]
28	brainpoolP256r1		[RFC6989], Sec. 2.3	[RFC6954]
29	brainpoolP384r1		[RFC6989], Sec. 2.3	[RFC6954]
30	brainpoolP512r1		[RFC6989], Sec. 2.3	[RFC6954]
31	Curve25519		[RFC8031], Sec. 3.2	[RFC8031]
32	Curve448		[RFC8031], Sec. 3.2	[RFC8031]
33	GOST3410_2012_256		[RFC9385, Sec. 6.1]	[RFC9385]
34	GOST3410_2012_512		[RFC9385, Sec. 6.1]	[RFC9385]
35-1023	Unassigned
1024-65535	Reserved for Private Use			[RFC7296]

Transform Type 5 - Extended Sequence Numbers Transform IDs

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Number	Name	Reference
0	No Extended Sequence Numbers	[RFC7296]
1	Extended Sequence Numbers	[RFC7296]
2-65535	Reserved	[RFC7296]

IKEv2 Identification Payload ID Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen

Reference

[RFC7296]

Available Formats

CSV

Value	ID Type	Reference
0	Reserved	[RFC7296]
1	ID_IPV4_ADDR	[RFC7296]
2	ID_FQDN	[RFC7296]
3	ID_RFC822_ADDR	[RFC7296]
4	Unassigned	[RFC7296]
5	ID_IPV6_ADDR	[RFC7296]
6-8	Unassigned	[RFC7296]
9	ID_DER_ASN1_DN	[RFC7296]
10	ID_DER_ASN1_GN	[RFC7296]
11	ID_KEY_ID	[RFC7296]
12	ID_FC_NAME	[RFC4595]
13	ID_NULL	[RFC7619]
14-200	Unassigned
201-255	Private use	[RFC7296]

IKEv2 Certificate Encodings

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	Certificate Encoding	Reference
0	Reserved	[RFC7296]
1	PKCS #7 wrapped X.509 certificate	[UNSPECIFIED]
2	PGP Certificate	[UNSPECIFIED]
3	DNS Signed Key	[UNSPECIFIED]
4	X.509 Certificate - Signature	[RFC7296]
5	Reserved	[RFC7296]
6	Kerberos Token	[UNSPECIFIED]
7	Certificate Revocation List (CRL)	[RFC7296]
8	Authority Revocation List (ARL)	[UNSPECIFIED]
9	SPKI Certificate	[UNSPECIFIED]
10	X.509 Certificate - Attribute	[UNSPECIFIED]
11	Raw RSA Key (DEPRECATED)	[RFC7296]
12	Hash and URL of X.509 certificate	[RFC7296]
13	Hash and URL of X.509 bundle	[RFC7296]
14	OCSP Content	[RFC4806]
15	Raw Public Key	[RFC7670]
16-200	Unassigned
201-255	Private use	[RFC7296]

IKEv2 Authentication Method

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Note

To find out requirement levels for IKEv2 authentication
methods, see [RFC8247].

Available Formats

CSV

Value	Authentication Method	Reference
0	Reserved	[RFC7296]
1	RSA Digital Signature	[RFC7296]
2	Shared Key Message Integrity Code	[RFC7296]
3	DSS Digital Signature	[RFC7296]
4-8	Unassigned	[RFC7296]
9	ECDSA with SHA-256 on the P-256 curve	[RFC4754]
10	ECDSA with SHA-384 on the P-384 curve	[RFC4754]
11	ECDSA with SHA-512 on the P-521 curve	[RFC4754]
12	Generic Secure Password Authentication Method	[RFC6467]
13	NULL Authentication	[RFC7619]
14	Digital Signature	[RFC7427]
15-200	Unassigned
201-255	Private use	[RFC7296]

IKEv2 Notify Message Types - Error Types

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Range	Registration Procedures
0-8191	Expert Review
8192-16383	Private use

Value	NOTIFY MESSAGES - ERROR TYPES	Reference
0	Reserved	[RFC7296]
1	UNSUPPORTED_CRITICAL_PAYLOAD	[RFC7296]
2-3	Reserved	[RFC7296]
4	INVALID_IKE_SPI	[RFC7296]
5	INVALID_MAJOR_VERSION	[RFC7296]
6	Reserved	[RFC7296]
7	INVALID_SYNTAX	[RFC7296]
8	Reserved	[RFC7296]
9	INVALID_MESSAGE_ID	[RFC7296]
10	Reserved	[RFC7296]
11	INVALID_SPI	[RFC7296]
12-13	Reserved	[RFC7296]
14	NO_PROPOSAL_CHOSEN	[RFC7296]
15-16	Reserved	[RFC7296]
17	INVALID_KE_PAYLOAD	[RFC7296]
18-23	Reserved	[RFC7296]
24	AUTHENTICATION_FAILED	[RFC7296]
25-33	RESERVED	[RFC7296]
34	SINGLE_PAIR_REQUIRED	[RFC7296]
35	NO_ADDITIONAL_SAS	[RFC7296]
36	INTERNAL_ADDRESS_FAILURE	[RFC7296]
37	FAILED_CP_REQUIRED	[RFC7296]
38	TS_UNACCEPTABLE	[RFC7296]
39	INVALID_SELECTORS	[RFC7296]
40	UNACCEPTABLE_ADDRESSES	[RFC4555]
41	UNEXPECTED_NAT_DETECTED	[RFC4555]
42	USE_ASSIGNED_HoA	[RFC5026]
43	TEMPORARY_FAILURE	[RFC7296]
44	CHILD_SA_NOT_FOUND	[RFC7296]
45	INVALID_GROUP_ID	[draft-yeung-g-ikev2]
46	AUTHORIZATION_FAILED	[draft-yeung-g-ikev2]
47	STATE_NOT_FOUND	[RFC9370]
48-8191	Unassigned
8192-16383	Private use	[RFC7296]

IKEv2 Notify Message Types - Status Types

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Range	Registration Procedures
16384-40959	Expert Review
40960-65535	Private use

Value	NOTIFY MESSAGES - STATUS TYPES	Reference
16384	INITIAL_CONTACT	[RFC7296]
16385	SET_WINDOW_SIZE	[RFC7296]
16386	ADDITIONAL_TS_POSSIBLE	[RFC7296]
16387	IPCOMP_SUPPORTED	[RFC7296]
16388	NAT_DETECTION_SOURCE_IP	[RFC7296]
16389	NAT_DETECTION_DESTINATION_IP	[RFC7296]
16390	COOKIE	[RFC7296]
16391	USE_TRANSPORT_MODE	[RFC7296]
16392	HTTP_CERT_LOOKUP_SUPPORTED	[RFC7296]
16393	REKEY_SA	[RFC7296]
16394	ESP_TFC_PADDING_NOT_SUPPORTED	[RFC7296]
16395	NON_FIRST_FRAGMENTS_ALSO	[RFC7296]
16396	MOBIKE_SUPPORTED	[RFC4555]
16397	ADDITIONAL_IP4_ADDRESS	[RFC4555]
16398	ADDITIONAL_IP6_ADDRESS	[RFC4555]
16399	NO_ADDITIONAL_ADDRESSES	[RFC4555]
16400	UPDATE_SA_ADDRESSES	[RFC4555]
16401	COOKIE2	[RFC4555]
16402	NO_NATS_ALLOWED	[RFC4555]
16403	AUTH_LIFETIME	[RFC4478]
16404	MULTIPLE_AUTH_SUPPORTED	[RFC4739]
16405	ANOTHER_AUTH_FOLLOWS	[RFC4739]
16406	REDIRECT_SUPPORTED	[RFC5685]
16407	REDIRECT	[RFC5685]
16408	REDIRECTED_FROM	[RFC5685]
16409	TICKET_LT_OPAQUE	[RFC5723]
16410	TICKET_REQUEST	[RFC5723]
16411	TICKET_ACK	[RFC5723]
16412	TICKET_NACK	[RFC5723]
16413	TICKET_OPAQUE	[RFC5723]
16414	LINK_ID	[RFC5739]
16415	USE_WESP_MODE	[RFC5840]
16416	ROHC_SUPPORTED	[RFC5857]
16417	EAP_ONLY_AUTHENTICATION	[RFC5998]
16418	CHILDLESS_IKEV2_SUPPORTED	[RFC6023]
16419	QUICK_CRASH_DETECTION	[RFC6290]
16420	IKEV2_MESSAGE_ID_SYNC_SUPPORTED	[RFC6311]
16421	IPSEC_REPLAY_COUNTER_SYNC_SUPPORTED	[RFC6311]
16422	IKEV2_MESSAGE_ID_SYNC	[RFC6311]
16423	IPSEC_REPLAY_COUNTER_SYNC	[RFC6311]
16424	SECURE_PASSWORD_METHODS	[RFC6467]
16425	PSK_PERSIST	[RFC6631]
16426	PSK_CONFIRM	[RFC6631]
16427	ERX_SUPPORTED	[RFC6867]
16428	IFOM_CAPABILITY	[Frederic_Firmin][3GPP TS 24.303 v10.6.0 annex B.2]
16429	SENDER_REQUEST_ID	[draft-yeung-g-ikev2]
16430	IKEV2_FRAGMENTATION_SUPPORTED	[RFC7383]
16431	SIGNATURE_HASH_ALGORITHMS	[RFC7427]
16432	CLONE_IKE_SA_SUPPORTED	[RFC7791]
16433	CLONE_IKE_SA	[RFC7791]
16434	PUZZLE	[RFC8019]
16435	USE_PPK	[RFC8784]
16436	PPK_IDENTITY	[RFC8784]
16437	NO_PPK_AUTH	[RFC8784]
16438	INTERMEDIATE_EXCHANGE_SUPPORTED	[RFC9242]
16439	IP4_ALLOWED	[RFC8983]
16440	IP6_ALLOWED	[RFC8983]
16441	ADDITIONAL_KEY_EXCHANGE	[RFC9370]
16442	USE_AGGFRAG	[RFC9347]
16443-40959	Unassigned
40960-65535	Private use	[RFC7296]

IKEv2 Notification IPCOMP Transform IDs (Value 16387)

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Note

To find out requirement levels for IPCOMP methods, see [RFC8221].

Available Formats

CSV

Value	Compression Type	Reference
0	Reserved	[RFC7296]
1	IPCOMP_OUI	[UNSPECIFIED]
2	IPCOMP_DEFLATE	[RFC2394]
3	IPCOMP_LZS	[RFC2395]
4	IPCOMP_LZJH	[RFC3051]
5-240	Unassigned
241-255	Private use	[RFC7296]

IKEv2 Security Protocol Identifiers

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Protocol ID	Protocol	Reference
0	Reserved	[RFC7296]
1	IKE	[RFC7296]
2	AH	[RFC7296]
3	ESP	[RFC7296]
4	FC_ESP_HEADER	[RFC4595]
5	FC_CT_AUTHENTICATION	[RFC4595]
6-200	Unassigned
201-255	Private use	[RFC7296]

IKEv2 Traffic Selector Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	TS Type	Reference
0-6	Reserved	[RFC7296]
7	TS_IPV4_ADDR_RANGE	[RFC7296]
8	TS_IPV6_ADDR_RANGE	[RFC7296]
9	TS_FC_ADDR_RANGE	[RFC4595]
10	TS_SECLABEL	[RFC-ietf-ipsecme-labeled-ipsec-12]
11-240	Unassigned
241-255	Private use	[RFC7296]

IKEv2 Configuration Payload CFG Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Available Formats

CSV

Value	CFG Type	Reference
0	Reserved	[RFC7296]
1	CFG_REQUEST	[RFC7296]
2	CFG_REPLY	[RFC7296]
3	CFG_SET	[RFC7296]
4	CFG_ACK	[RFC7296]
5-127	Unassigned
128-255	Private use	[RFC7296]

IKEv2 Configuration Payload Attribute Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7296]

Note

Attribute Types with an "*" may be multi-valued on return only if
multiple values were requested.

Available Formats

CSV

Value	Attribute Type	Multi-Valued	Length	Reference
0	Reserved			[RFC7296]
1	INTERNAL_IP4_ADDRESS	YES*	0 or 4 octets	[RFC7296]
2	INTERNAL_IP4_NETMASK	NO	0 or 4 octets	[RFC7296]
3	INTERNAL_IP4_DNS	YES	0 or 4 octets	[RFC7296]
4	INTERNAL_IP4_NBNS	YES	0 or 4 octets	[RFC7296]
5	Reserved			[RFC7296]
6	INTERNAL_IP4_DHCP	YES	0 or 4 octets	[RFC7296]
7	APPLICATION_VERSION	NO	0 or more	[RFC7296]
8	INTERNAL_IP6_ADDRESS	YES*	0 or 17 octets	[RFC7296]
9	Reserved			[RFC7296]
10	INTERNAL_IP6_DNS	YES	0 or 16 octets	[RFC7296]
11	Reserved			[RFC7296]
12	INTERNAL_IP6_DHCP	YES	0 or 16 octets	[RFC7296]
13	INTERNAL_IP4_SUBNET	YES	0 or 8 octets	[RFC7296]
14	SUPPORTED_ATTRIBUTES	NO	Multiple of 2	[RFC7296]
15	INTERNAL_IP6_SUBNET	YES	17 octets	[RFC7296]
16	MIP6_HOME_PREFIX	YES	0 or 21 octets	[RFC5026]
17	INTERNAL_IP6_LINK	NO	8 or more	[RFC5739]
18	INTERNAL_IP6_PREFIX	YES	17 octets	[RFC5739]
19	HOME_AGENT_ADDRESS	NO	16 or 20	[http://www.3gpp.org/ftp/Specs/html-info/24302.htm][John_Meredith]
20	P_CSCF_IP4_ADDRESS	YES	0 or 4 octets	[RFC7651]
21	P_CSCF_IP6_ADDRESS	YES	0 or 16 octets	[RFC7651]
22	FTT_KAT	NO	2 octets	[TS 24.302 12.6.0]
23	EXTERNAL_SOURCE_IP4_NAT_INFO	NO	0 or 6	[TS 29.139][Kimmo_Kymalainen]
24	TIMEOUT_PERIOD_FOR_LIVENESS_CHECK	NO	0 or 4 octets	[TS 24.302 13.4.0][Frederic_Firmin]
25	INTERNAL_DNS_DOMAIN	YES	0 or more	[RFC8598]
26	INTERNAL_DNSSEC_TA	YES	0 or more	[RFC8598]
27	ENCDNS_IP4	YES	0 or more	[RFC-ietf-ipsecme-add-ike-14]
28	ENCDNS_IP6	YES	0 or more	[RFC-ietf-ipsecme-add-ike-14]
29	ENCDNS_DIGEST_INFO	YES	0 or more	[RFC-ietf-ipsecme-add-ike-14]
30-16383	Unassigned
16384-32767	Private Use			[RFC7296]

IKEv2 Gateway Identity Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC5685]

Available Formats

CSV

Value	Description	Reference
0	Reserved	[RFC5685]
1	IPv4 address of the VPN gateway	[RFC5685]
2	IPv6 address of the VPN gateway	[RFC5685]
3	FQDN of the VPN gateway	[RFC5685]
4-240	Unassigned
241-255	Reserved for Private Use	[RFC5685]

ROHC Attribute Types

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC5857]

Available Formats

CSV

Value	ROHC Attribute Type	Format	Reference
0	Reserved		[RFC5857]
1	Maximum Context Identifier (MAX_CID)	TV	[RFC5857]
2	ROHC Profile (ROHC_PROFILE)	TV	[RFC5857]
3	ROHC Integrity Algorithm (ROHC_INTEG)	TV	[RFC5857]
4	ROHC ICV Length in bytes (ROHC_ICV_LEN)	TV	[RFC5857]
5	Maximum Reconstructed Reception Unit (MRRU)	TV	[RFC5857]
6-16383	Unassigned
16384-32767	Reserved for Private Use		[RFC5857]

IKEv2 Secure Password Methods

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC6467]

Available Formats

CSV

Value	Description	Reference
0	Reserved	[RFC6467]
1	PACE	[RFC6631]
2	AugPAKE	[RFC6628]
3	Secure PSK Authentication	[RFC6617]
4-1023	Unassigned
1024-65535	Reserved for Private Use	[RFC6467]

IKEv2 Hash Algorithms

Registration Procedure(s)

Expert Review

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC7427]

Note

To find out requirement levels for IKEv2 hash algorithms, see
[RFC8247].

Available Formats

CSV

Value	Hash Algorithm	Reference
0	Reserved	[RFC7427]
1	SHA1	[RFC7427]
2	SHA2-256	[RFC7427]
3	SHA2-384	[RFC7427]
4	SHA2-512	[RFC7427]
5	Identity	[RFC8420]
6	STREEBOG_256	[RFC9385]
7	STREEBOG_512	[RFC9385]
8-1023	Unassigned
1024-65535	Reserved for Private Use	[RFC7427]

IKEv2 Post-quantum Preshared Key ID Types

Expert(s)

Tero Kivinen, Valery Smyslov

Reference

[RFC8784]

Available Formats

CSV

Range	Registration Procedures
1-127	Expert Review
128-255	Private Use

Value	PPK_ID Type	Reference
0	Reserved	[RFC8784]
1	PPK_ID_OPAQUE	[RFC8784]
2	PPK_ID_FIXED	[RFC8784]
3-127	Unassigned
128-255	Reserved for Private Use	[RFC8784]

Contact Information

ID	Name	Contact URI	Last Updated
[Frederic_Firmin]	Frederic Firmin	mailto:frederic.firmin&etsi.org	2016-03-08
[John_Meredith]	John Meredith	mailto:john.meredith&etsi.org	2010-05-17
[Kimmo_Kymalainen]	Kimmo Kymalainen	mailto:kimmo.kymalainen&etsi.org	2015-12-02
[Matt_Ball]	Matt Ball	mailto:matt.ball&ieee.org	2007-10-11