Rekey process in IKE Phase 1 and Phase 2

[rakesh24csco]

Hi,

Could someone please explain me the IKE Phase 1 and Phase 2 rekey process in detail? What are the messages exchanged during rekey? Which message indicate the beginning of rekey? Is it going to re-authenticate the peers? Is it going to impact the existing data SAs?

In short, just explain everything about the rekey. I am unable to find out relevant docs on this.

Thanks,

Rakesh Kumar

[rbertoli87]

Hi,

I have read a lot of documentations in internet about rekey process, but I didn't understand what is the right rekey process during phase 1 and phase2 in a VPN IPSec. 

https://tools.ietf.org/html/draft-jenkins-ipsec-rekeying-03#page-18

I find this document very helpful, but I don't know if it's still actual.

Thanks,

Roby

[rakesh24csco]

Hi Roby,

Thanks for your reply. 

I also did a lot of research before posting my query here. Already went through that RFC, however, that talks about different things and refers to some implementation scenarios. 

Lets see if someone else shares their experience here.

Thanks,

Rakesh Kumar