A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?

In IKEv2 (Internet Key Exchange version 2), the second set of traffic selectors is typically exchanged in the IKE Create Child SA (Security Association) packet.

Detailed Explanation:

1. IKEv2 Overview: IKEv2 is a protocol used to set up a security association (SA) in the IPsec protocol suite. It involves multiple exchanges of packets to negotiate security parameters between two peers.

2. Traffic Selectors: Traffic selectors define which traffic is to be protected by the security association. During the initial exchange, some selectors may be defined, but additional or more specific selectors can be negotiated later.

3. Create Child SA Message:

   • This message is part of the IKEv2 process that allows the peers to establish a new security association based on the previously established one.
   • The message includes proposals for the new security parameters and allows for the negotiation of additional traffic selectors, which accommodates changes in the traffic being handled.

Thus, when two peers negotiate a second set of traffic selectors, it is done using the IKEv2 Create Child SA packet.