Security

A Measurement Study on IKEv2 Authentication Performance in Wireless Networks

Free registration required

Executive Summary

This paper presents an experimental evaluation of the performance costs of a wide variety of authentication methods over IKEv2 in wireless networks. The studied methods are Pre-Shared Keys (PSK), Extensible Authentication Protocol (EAP) using MD5, SIM, TTLS-MD5, TLS, and PEAP-MSCHAPv2. For the EAP-based methods RADIUS is used as Authentication, Authorization, and Accounting (AAA) server. Two network scenarios, WiFi and UMTS, are considered. The measurement results illustrate the practical costs involved for IKEv2 authentication, and show significant performance differences between the methods.

  • Format: PDF
  • Size: 778.3 KB