IKE, Internet Key Exchange

The Internet Key Exchange automates the process of communication and authentication for Ipsec (Internet Protocol Security) SA (Security Associations). Security Associations are policies that act as the communication platform in between two or more parties - the parties involved in the transaction are linked by a key. The IKE ensures protection for SA transactions without configurations that would normally be required. IKE combines two previous security protocols into an ISKAMP-TCP/IP-based environment: Oakley and Skeme. ISKAMP (Internet Security Association and Key Management Protocol) determines the framework needed for the key exchange and authentication - the Oakley protocol details a specific sequence of key exchanges while identifying their methods of authentication and protection - the Skeme protocol specifies the actual methods used for the key exchange. Though IKE is not needed for IPsec configuration, it provides several benefits such as the automated process of communication and authentication, CA (Certificate Authority) support and anti-replay services.