Additionally it will depend on the round trip time across the network between the two peers.
Vendors who are selling network boxes that can do a large number of simultaneous IKE negotiations tend to care more about simultaneous IKE SA negotiations per second than they do the actual negotiation time of any one single negotiation. HTH, Gregory. On Wed, Nov 18, 2009 at 8:27 AM, Dan McDonald <[email protected]> wrote: > On Tue, Nov 17, 2009 at 11:31:45PM -0700, [email protected] wrote: > <SNIP!> > > > Greetings. Is there any data out there that quantifies how long a typical > > IKEv1 session (main mode and/or aggressive mode) take to complete? > > I don't think anyone's done a thorough survey of implementations or > parameters they use. If anyone has, or knows of such a survey, they should > really share with this list. > > A LOT depends on what you use for your Oakley Group, your authentication > method (and the certificate key size in the case of certificates), and, of > course, the hardware upon which you run it. There's a lot of combinations > there! > > Dan > _______________________________________________ > IPsec mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/ipsec > -- ---- IETF related email from Gregory M. Lebovitz Juniper Networks
_______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
