The Analysis And Design Of IKE Protocol For VPN Security Gateway

IKE (Internet Key Exchange) protocol is a kind of protocol for key management, which is responsible for dynamic key negotiation and IPSec SA (Security Association) management used in IPSec (IP Security). At first, the paper introduces IKE protocol, including the protocol framework, the process of negotiation and the format of IKE messages, the paper then presents its architecture and feasible design of IKE on the basis of the previous project (VPN gateway with manual SA configuration) to implement dynamic key exchange. The paper has also described the design thoughts and detailed design approaches of corresponding modules and has discussed its main data structures and flow charts. In then end, the paper has accounted for system function extension of IKE protocol.