Re: [Emu] Question on EAP-IKEv2

[Hannes Tschofenig <Hannes.Tschofenig at gmx.net>]

That's one reason.

The other one is to be able to have a strong password based mechanism.
When you reverse the roles of client and server then you allow the 
server to be authenticated first before you present your "password".

Finally, reversing the roles allows you to offer active user identity 
confidentiality.

Ciao
Hannes



Ali Fessi wrote:
> Hi,
>
> I wonder why the IKEv2 exchange in EAP-IKEv2 is initiated by the server.
>
> (See, RFC 5106, Page 7, Figure 1, message 3)
>
> Is the reason to save two messages, for example, compared to EAP-TLS?
>
> Best,
>   Ali
>
> _______________________________________________
> Emu mailing list
> Emu at ietf.org
> https://www.ietf.org/mailman/listinfo/emu
>   

_______________________________________________
Emu mailing list
Emu at ietf.org
https://www.ietf.org/mailman/listinfo/emu