ABSTRACT

IKE, the automatic key management protocol that supports IPSec SAs, provides several different types of authentication for the systems that provide the termination points of the SA. There are four authentication methods within IKE that provide various options to the peers:

1. pre-shared secret 2. digital signature 3. public key encryption 4. revised public key encryption

Each authentication method provided by IKE has various advantages and disadvantages; but by making options available to the peers on the type of authentication, greater flexibility is obtained.