关键词: IKEv2, EAP, 认证

Abstract: IETF put forward a new version of IKE, IKEv2.Different from the old IKE,IKEv2 combines and redefines key exchange process. This paper introduced IKEv2, and analysed the security of key negotiation mechanism of IKEv2.Aiming at some security problems in EAP exchange, such as authentication with digital certificate and reauthentication to avoid accessing VPN tunnel with unauthorized identity, some improvement advice and solutions were given.

Key words: IKEv2, EAP, authentication