Topic

Key exchange

Applicable to

all

History

Priority

must not

Mar 2022

IKE version 2 is used for key exchange when establishing IPsec connections.

The Internet Key Exchange version 1 (IKEv1) protocol was obsoleted by the IKE version 2 (IKEv2) protocol in December 2005. Since IKEv2 has now been widely adopted, and in doing so addresses various problems with IKEv1, approval for the use of IKEv1 as part of Internet Protocol security implementations has been rescinded.

2015

Agencies must not use manual keying for Key Exchange when establishing an IPsecconnection.