|
Overview:
The Aricent IKE software is a portable implementation of the industry-standard IKE (Internet Key Exchange) protocol. Aricent IKE supports the Main Mode and Aggressive Mode of Phase-1 and Quick Mode of Phase-2. It supports both IPv4 and IPv6 addresses.
Figure 1. Aricent IKE Architecture.
Aricent IKE Features:
- Supports Main Mode and Aggressive Mode of Phase-1.
- Supports Quick Mode of Phase-2.
- Supports Information Exchange Mode.
- Supports Diffie-Hellman groups 1, 2, and 5.
- Supports Pre-Shared Key and RSA Signature authentication methods.
- Supports AES, 3-DES and DES for encryption.
- Supports HMAC-MD5 and HMAC-SHA1 for authentication.
- Supports AH and ESP IPSec Protocols.
- Supports Transport and Tunnel Mode.
- Supports SA Lifetime in Seconds and Kilobytes.
- Provides support for Perfect Forward Secrecy.
- Supports X.509 certificates.
- Supports sending and receiving INITIAL-CONTACT, INVALID-SPI and DELETE payloads.
- Supports Virtualization: Multiple IKE Engines with independent SPD.
- Supports a well-defined interface for interaction between IPSec and IKE. Can work with Aricent IPSec or any third party IPSec implementation.
- Supports well defined interface for Crypto functions. Adding new algorithms do not require any change to the protocol specific code.
- Provides support for SNMP, CLI and Web-based management.
- Conforms to Future Software Architecture for Portability (FSAP2), thus ensuring highly portable code that uses flexible buffer and timer management libraries.
Benefits:
Aricent IKE is easily portable across various architectures and reduces the time to market for OEMs and VARs, who wish to incorporate the functionality of automatic generation of SA for IPSec.
|
