IKEv2
E123427
IKEv2 is a modern key management and security association protocol used to establish and maintain secure VPN connections in IPsec-based networks.
All labels observed (9)
How this entity was disambiguated
This entity first appeared as the object of triple T1077083 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: IKEv2 Context triple: [IPsec, hasVersion, IKEv2]
-
A.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
-
B.
Teredo
Teredo is a tunneling protocol that enables IPv6 connectivity for devices on IPv4 networks, particularly those behind NAT.
-
C.
Mopria
Mopria is a universal mobile printing standard that enables seamless, driverless printing from devices like smartphones, tablets, and Chromebooks to compatible printers.
-
D.
Internet Protocol version 6
Internet Protocol version 6 (IPv6) is the modern Internet addressing and routing protocol designed to replace IPv4 by providing a vastly larger address space and improved network efficiency and security features.
-
E.
RFC 4252
RFC 4252 is an Internet standard that specifies the authentication protocol used by Secure Shell (SSH) for secure remote login and other network services.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: IKEv2 Target entity description: IKEv2 is a modern key management and security association protocol used to establish and maintain secure VPN connections in IPsec-based networks.
-
A.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
-
B.
Teredo
Teredo is a tunneling protocol that enables IPv6 connectivity for devices on IPv4 networks, particularly those behind NAT.
-
C.
Mopria
Mopria is a universal mobile printing standard that enables seamless, driverless printing from devices like smartphones, tablets, and Chromebooks to compatible printers.
-
D.
Internet Protocol version 6
Internet Protocol version 6 (IPv6) is the modern Internet addressing and routing protocol designed to replace IPv4 by providing a vastly larger address space and improved network efficiency and security features.
-
E.
RFC 4252
RFC 4252 is an Internet standard that specifies the authentication protocol used by Secure Shell (SSH) for secure remote login and other network services.
- F. None of above. chosen
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
Internet Key Exchange protocol
ⓘ
key management protocol ⓘ security association protocol ⓘ |
| category |
VPN protocol component
ⓘ
network security protocol ⓘ |
| defaultPort | 500 ⓘ |
| defaultPortWithNATTraversal | 4500 ⓘ |
| definedInRFC | RFC 7296 ⓘ |
| designedFor | IPsec-based networks ⓘ |
| firstStandardizedInYear | 2005 ⓘ |
| hasExchangeType |
CREATE_CHILD_SA
ⓘ
INFORMATIONAL ⓘ |
| hasExtension | MOBIKE ⓘ |
| hasFeature |
built-in NAT traversal
ⓘ
fewer message exchanges than IKEv1 ⓘ keepalive mechanism ⓘ simplified state machine ⓘ support for multiple Child SAs under one IKE SA ⓘ |
| hasPhase |
IKE_AUTH
ⓘ
IKE_SA_INIT ⓘ |
| improvesOn |
IKEv1 performance
ⓘ
IKEv1 reliability ⓘ IKEv1 security ⓘ |
| MOBIKEDefinedInRFC | RFC 4555 ⓘ |
| obsoletes | IKEv1 ⓘ |
| roleInIPsec |
establishing Security Associations
ⓘ
managing key material ⓘ negotiating cryptographic parameters ⓘ |
| standardizedBy |
IETF
ⓘ
linked to:
Internet Engineering Task Force
|
| supports |
DoS attack mitigation mechanisms
ⓘ
EAP authentication ⓘ NAT traversal ⓘ certificate-based authentication ⓘ configuration payloads ⓘ mobility ⓘ multihoming ⓘ mutual authentication ⓘ pre-shared key authentication ⓘ rekeying of SAs ⓘ |
| updatedBy |
RFC 5996
ⓘ
RFC 7296 ⓘ |
| usedFor |
VPN connections
ⓘ
establishing IPsec Security Associations ⓘ |
| usedWith | IPsec ⓘ |
| uses |
Diffie–Hellman key exchange
ⓘ
cryptographic hashes ⓘ encryption algorithms ⓘ integrity protection algorithms ⓘ |
| usesTransportProtocol | UDP ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: IKEv2 Description of subject: IKEv2 is a modern key management and security association protocol used to establish and maintain secure VPN connections in IPsec-based networks.
Referenced by (21)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: IKEv2
linked to: IKEv2
linked to: IKEv2
linked to: IKEv2