name: IKE
full_form: Internet Key Exchange
context: Secrecy)and the session keys should be changed frequently. For reauthentication: - Reauthentication of IKE SAs as specified in RFC 7296 [43] section 2.8.3 shall be supported; - A NE shall proactively initiate reauthentication of IKE SAs, and creation of its Child SAs, i.e. the new SAs shall be established before the old ones expire; - A NE shall destroy an IKE SA and its Child SAs when the authentication lifetime of the IKE SA expires; NOTE 2: NE actions related to reauthentication are controlled by locally configured lifetimes according to RFC 4301 [35]: a soft authentication lifetime that warns the implementation to initiate reauthentication, and a hard authentication lifetime when the current IKE SA and its Child SAs are destroyed. - In addition to the requirements defined in RFC 7296 [43], reauthentication shall not lead to a noticeable degradation of service.
description: Internet Key Exchange (IKE) is a protocol used for setting up and managing IPsec VPNs. It is responsible for establishing, negotiating, and managing the security associations (SAs) between two endpoints.
explanation: The text explicitly states that IKE is a protocol used for establishing and managing security associations in IPsec VPNs.
section_title: 5.4.2	Profiling of IKEv2
biotag_Context: O,O,O,O,O,O,O,O,O,O,O,O,O,B-Protocol,O,O,O,O,B-Specification,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,B-Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,B-Protocol,B-Mode,O,O,O,O,O,O,O,O,O,O,B-Protocol,B-Mode,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,B-Specification,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Protocol,B-Mode,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Specification,O,O,O,O,O,O,O,O,O,O,O,O
biotag_Description: B-Protocol,I-Protocol,I-Protocol,O,O,O,O,O,O,O,O,O,O,B-Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O