Differences between IKEv1 and IKEv2

Differences between IKEv1 and IKEv2

--> IKEv2 is an enhancement to IKEv1.

--> IKEv2 does not consume more bandwidth compared to IKEv1.

--> IKEV2 is more scalable by using proposals which automatically creates the different combinations of policies or security associations.

--> IKEv2 supports EAP authentication whereas IKEv1 does not support.

--> IKEv2 is having built-in NAT traversal whereas IKEv1 is having optional.

--> IKEv2 supports MOBIKE where IKEv1 does not support.( MOBIKE allows IKEv2 to be used in Mobile platforms).

--> IKEv1 requires symmetric authentication (both have to use the same method of authentication), whereas IKEv2 uses Asymmetric Authentication ( Means one side RSA, another side can be pre-shared-key).

--> IKEv2 allows you to use separate keys for each direction which provides more security compared to IKEv1.

--> IKEv2 provides more security by having the support for more algorithms compared to IKEv1.

--> Flex VPN will work with the only IKEv2, not with IKEv1.

--> IKEV2 supports 4 messages whereas IKEv1 works in two modes ( Main Mode -- 6 messages and Aggressive Mode -- 3 messages).

--> IKEV2 is not backward compatible with IKEV1.