Phase 1
Negotiate
ISAKMP SA
Mutual Authentication
Phase 2
Negotiate SAs
For AH and ESP
Main Mode
New IPSec tunnel or Rekeying
Quick Mode
With PFS
Protected Data Transfer
- 95 -
Multi-Homing Security Gateway User's Manual
Start
or
Aggressive Mode
Quick Mode
or
Without PFS