IKE is the main key management protocol in IPsec that negotiates and establishes security associations and keys.

IKE is the main key management protocol in IPsec that negotiates and establishes security associations and keys.

• A. Oakley
• B. DOI
• C. IKE
• D. ISAKMP

Answer: (C)

The main concept here is how IPsec picks, negotiates, and maintains the cryptographic parameters that protect traffic. Internet Key Exchange is the protocol that actually does this: it negotiates Security Associations and derives the keys used to encrypt and authenticate IPsec-protected traffic. In practice, IKE runs through phases where it first establishes a secure channel and authenticates peers, then negotiates the IPsec SAs (the specific crypto algorithms, lifetimes, and keys). Oakley refers to the Diffie-Hellman-based key exchange methods used within IKE to compute fresh shared keys, while ISAKMP provides the overall message framework and procedures that structure this negotiation. So, IKE is the correct answer because it is the active protocol responsible for negotiating and establishing SAs and keys in IPsec, with Oakley as the underlying key-exchange mechanism and ISAKMP as the framework that supports the process. The other terms describe components or concepts used by IKE, not the protocol that performs the negotiations itself.

The main concept here is how IPsec picks, negotiates, and maintains the cryptographic parameters that protect traffic. Internet Key Exchange is the protocol that actually does this: it negotiates Security Associations and derives the keys used to encrypt and authenticate IPsec-protected traffic. In practice, IKE runs through phases where it first establishes a secure channel and authenticates peers, then negotiates the IPsec SAs (the specific crypto algorithms, lifetimes, and keys). Oakley refers to the Diffie-Hellman-based key exchange methods used within IKE to compute fresh shared keys, while ISAKMP provides the overall message framework and procedures that structure this negotiation. So, IKE is the correct answer because it is the active protocol responsible for negotiating and establishing SAs and keys in IPsec, with Oakley as the underlying key-exchange mechanism and ISAKMP as the framework that supports the process. The other terms describe components or concepts used by IKE, not the protocol that performs the negotiations itself.