I have some Wireshark
traces to see how ISAKMP works. This traces were taken from peers when a IPsec tunnel is stablished.
It seems that the traces display a different IPsec implementation. When IKE phase 1 takes place sometimes i see packets marked as IKE_SA_INIT
and IKE_AUTH
for the exchange type field of the ISAKMP protocol and sometimes i see packets with the value Identity protection
and Quick Mode
for the exchange type field. What is the difference between this implementations of the IKE phase 1?.
Add a comment
|