Design and Implementation to Support Multiple Key Exchange Protocol for IPsec

Racoon2 project has developed racoon2 which supports multiple key exchange protocols for IPsec, which are IKEv2 and KINK. IKEv2 is a successor of IKEv1 with many improvements. KINK is an another key exchange protocol for IPsec by using Kerberos. We introduced a IPsec policy management daemon to coordinate the daemons for each key exchange protocols. We will describe its architecture design and implementation status.