Application of IKE protocol for IPsec VPN into embedded system

IPsec protocol has been deployed widely at remote business environment because of its properties, confidentiality and integrity for network traffic. Before using IPsec protocol, it is needed that negotiations of security associations and keys between two end points of IPsec tunnel. Internet Key Exchange protocol is used when negotiation is done automatically. But because full specification of Internet Key Exchange protocol introduced in RFC standards is so complex and heavy, it is not suitable for embedded system that has small resources. In this paper, we introduce the simplified Internet Key Exchange protocol for embedded system by supporting minimal function for co-working with other implementation. We will prove that this IKE protocol has been implemented based on RFC by working with other commercial IKE protocol and show the negotiation performance of IKE protocol by using test tool. The simplified Internet Key Exchange protocol that is designed and implemented within Xscale Core of Intel IXP2800 Network processor as a part of our works that integrating the security functions such as packet filtering, IDS, IPsec based VPN into network device, router, that is based on IXP2800 network processor.