HP UX IPSec Software Manual Keys, Internet Key Exchange (IKE)

HP-UX IPSec Overview

Introduction

•Internet Key Exchange (IKE) protocol, for generating and distributing cryptography keys for ESP and AH. IKE also authenticates the identity of the remote system, so AH and authenticated ESP with IKE keys provides data origin authentication.

•Manual Keys, an alternative to IKE. Instead of dynamically generating and distributing cryptography keys for ESP and AH, the cryptography keys are static and manually distributed. Manual keys are typically used only when the remote system does not support IKE, or in Mobile IPv6 topologies.

28 Chapter 1