The IPSec pieces - IKE IKE (Internet Key Exchange Protocol) Responsible for negotiating SA (Security Associations) between hosts IKE protocol based on ISAKMP (Internet Security Association and Key Management Protocol) Oakley Key Determination Protocol Runs on UDP port 500 Requires PSK (Pre-shared keys) or pubkey for authentication of peer.