The
Internet Key Exchange (IKE)
protocol is a key management protocol standard that
is used in conjunction with the
IPSec standard. IKE
enhances IPSec by providing additional features, flexibility, and ease of
configuration for the IPSec standard. IPSec can however, be configured without
IKE. Benefits provided by IKE include:
- Eliminates the need to manually specify all the IPSec security
parameters in the crypto maps at both peers.
- Allows you to specify a lifetime for the IPSec security association.
- Allows encryption keys to change during IPSec sessions.
- Allows IPSec to provide anti-replay services.
- Permits Certification Authority (CA) support for a manageable, scalable
IPSec implementation.
- Allows dynamic authentication of peers.
See also IPSec.
