Versions Compared

Old Version 4

changes.mady.by.user Jean-luc KRIKER

Saved on

compared with

New Version 5

changes.mady.by.user Jean-luc KRIKER

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.




Internet Key Exchange
IKE Version 1 


Phase 1 
  • Main Mode:  ( site-2-site )
  1. Propose : Encryption and Authentication Algorithms
  2. Initiator and
respondor
  1. responder: Diffie-Hellman key exchange process  (send Public key + Random number )

            Pre-shared key

            Private Keys ( exchange using PKI ) 

  3. Use the encryoted encrypted communication channel

Main Mode: 

  4. Send IKE identification to authenticate itself


  • Aggressive Mode:  
  1. Initiator Propose : Encryption and Authentication Algorithms  + IKE identity to authenticate itself
  2. Responder Propose
  3. Secure channel for negotiating the IPsec VPN phase 2
Phase 2
IKE Version 2 



IKE-SA-INIT

IKE-AUTH

CREATE_CHILD_SA

INFORMATIONAL

Image Modified

Tunnel Mode ( most used )
  • encapsulation of the layer 3 / original packet
  • With ESP(+AH) or just AH



Transport Mode 

encapsulation of layer

4of

4 of the original packet


Image Added

PKI or  Public Key Infrastructure