Re: Manual keying and replay prevention and ISAKMP negotiation

[ho@xxxxxxxxxxxxx (Hilarie Orman)]

There are two types of manual keying.  The AH and ESP implementations must
be able to work in the absence of any keying protocols at all. That's
why the drafts mention manual keying: it's all you can count on without
a key exchange protocol.

The ISAKMP/Oakley manual keying is for a different case.  If one party
has a key generated by a method that he is especially fond of
(e.g. hardware), he can securely transmit it to another party and
assign it to an SA.

Hilarie