IKE

IKE negotiates the cryptographic keys and security associations that IPsec uses to protect traffic. It authenticates the two endpoints, using certificates or pre-shared keys, and agrees on algorithms before any data flows. IKEv2 is the modern version, valued for faster reconnection and mobility support in remote-access VPNs.