156-215.80 · Question #255
How many packets does the IKE exchange use for Phase 1 Main Mode?
The correct answer is D. 6. IKE Phase 1 Main Mode uses exactly 6 messages organized as 3 bidirectional exchanges to establish a secure, authenticated IKE SA.
Question
How many packets does the IKE exchange use for Phase 1 Main Mode?
Options
- A12
- B1
- C3
- D6
How the community answered
(35 responses)- A6% (2)
- B3% (1)
- C3% (1)
- D89% (31)
Why each option
IKE Phase 1 Main Mode uses exactly 6 messages organized as 3 bidirectional exchanges to establish a secure, authenticated IKE SA.
12 messages does not correspond to any standard IKE mode and is not defined by RFC 2409.
1 message is not a valid exchange count for any IKE mode since a minimum request-response pair is required.
3 messages describes IKE Phase 1 Aggressive Mode, which compresses the exchange at the cost of identity protection, not Main Mode.
IKE Phase 1 Main Mode exchanges 6 messages: messages 1 and 2 negotiate IKE SA parameters such as encryption algorithm, hash, DH group, and lifetime; messages 3 and 4 perform the Diffie-Hellman public value and nonce exchange to derive keying material; and messages 5 and 6 exchange identity and authentication data, which are encrypted using the keys derived in the prior exchange. This 6-message structure is what provides identity protection - a key advantage of Main Mode over Aggressive Mode.
Concept tested: IKE Phase 1 Main Mode packet exchange count
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14106-how-ike-works.html
Topics
Community Discussion
No community discussion yet for this question.