isakmp

As the Isakmp both sides own two keys .

密钥管理方面：在ISAKMP中，双方都有两把密钥，分别用于公用、私用。

Keeping to ISAKMP / OAKLEY protocol , has presented the secure and credible key distribution and management , supported strict identity authentication based on PKI and supported X.

遵循ISAKMP／OAKLEY密钥协商和管理协议，实现安全可靠的密钥分发与管理，支持X。

For the first exchange step , IKE uses ID protect exchange ( main exchange mode ), and formulates wild exchange ( wild exchange mode ) method according to basic ISAKMP documentation .

对阶段1交换，IKE采用的是身份保护交换（主模式交换），以及根据基本ISAKMP文档制订的野蛮模式交换；

This paper deeply research the theory of IPSec protocols , the implement mechanism and system kernel struct , Designed on the foundation of the IPSEC VPN according to the ISAKMP VPN key management project .

本文对ISAKMP协议族的原理、实现机制、系统内核结构进行了深入研究，在IPSECVPN的基础上设计了一种基于ISAKMP技术的VPN密钥管理方案。

The Authentication Header Protocol , the Encapsulating Security Payload Protocol and the ISAKMP / Oakley protocol based on IPv6 were introduced . Then , the significance of SA and the procedure of setting up encrypting information of communications were described .

介绍了IPv6安全协议中AH认证头协议、有效载荷封装ESP协议和密钥管理的ISAKMP协议，然后阐述了安全关联SA的意义及利用ISAKMP/Oakley协议建立通信所需加密信息的过程。

The security properties of IKE protocols and the negotiation of Internet key exchange were analyzed , including the process of establishing ISAKMP SA in the main mode , and the completion of IPsec SA negotiation by using established ISAKMP SA in the fast mode .

分析了IKE协议的安全特性，以及IKE的协商过程.其中包括：在主模式中建立ISAKMPSA的过程和在快速模式中利用已建立好的ISAKMPSA完成IPsecSA的协商。

Based on the standard protocols of IPSec and ISAKMP / OAKLEY , the paper presents a network security device named IP Tunnel Machine , which can be used to construct VPN . I have researched IKE protocol and implemented the automatic negotiation mechanism of IP tunnel .

本文基于IPSec标准协议，遵循ISAKMP／OAKLEY密钥协商和管理协议，设计和实现了一个具有自主知识产权的VPN产品&IP隧道机，并重点研究了IKE协议，实现了IP隧道自动协商机制。