Although it is possible to manually enter all the parameters needed for IPsec operation on the various devices, this approach is limited both in security and scalability. As a consequence, the IPsec working group has developed a protocol to dynamically manage the IPsec parameters. The resulting protocol, formerly known as ISAKMP/Oakley, has been renamed IKE (Internet Key Exchange) and focuses on two things: authenticated key exchange and management of the security associations in general. This protocol is rather complex and has many options and modes of operation which provide different features. This talk will introduce the basic concepts of key management and give an overview of IKE.  

For Further Info