Internet Key Exchange (IPSec IKE) is a major protocol in the IPSec architecture. It is a hybrid protocol that uses some Oakley and some SKEME, and synergies ISAKMP provides key generation materials and other security couplets, such as AH and ESPs for IPsec DOI.
Isakmp only proposes a structure framework for authentication and key exchange, but there is no specific definition. ISAKM is independent and supports multiple different key exchanges. IKE is one of a series of key exchanges, called "mode".
IKE can be used to negotiate virtual private network (VPN), or it can also be used to access secure hosts or networks without prior knowledge of the IP address. The client model is not a terminal point initiated by the negotiation party. When using customer mode, the identity of the end is hidden.
For more information, please visit the following page: 中文 版: http://www.networkDictionary.com/chinese/protocols/ike.php
English: http://www.networkDictionary.com/protocols/ike.php
