Configuring IKE (Task Map)

You can use preshared keys, self-signed certificates, and certificates from a Certificate Authority (CA) to authenticate IKE. A rule links the particular IKE authentication method with the end points that are being protected. Therefore, you can use one or all IKE authentication methods on a system. A pointer to a PKCS #11 library enables IKE to use an attached hardware accelerator.

After configuring IKE, complete the IPsec task that uses the IKE configuration. The following table refers you to task maps that focus on a specific IKE configuration.

Task	Description	For Instructions
Configure IKE with preshared keys.	Protects communications between two systems by having the systems share a secret key.	Configuring IKE With Preshared Keys (Task Map)
Configure IKE with public key certificates.	Protects communications with public key certificates. The certificates can be self-signed, or they can be vouched for by a PKI organization.	Configuring IKE With Public Key Certificates (Task Map)
Cross a NAT boundary.	Configures IPsec and IKE to communicate with a mobile system	Configuring IKE for Mobile Systems (Task Map)
Configure IKE to use a hardware keystore to generate a certificate pair.	Enables a Sun Crypto Accelerator 6000 board to accelerate IKE operations and to store public key certificates.	Configuring IKE to Find Attached Hardware

Skip Navigation Links
Exit Print View
	Securing the Network in Oracle Solaris 11.1 Oracle Solaris 11.1 Information Library