Patent ID: 8327129
Filing Date: 2012-12-04
Classification: H04L

Abstract:
1. A method for Internet key exchange (IKE) negotiation, comprising: after receiving a data packet, selecting, by a first apparatus, one of multiple service cards comprised by the first apparatus according to a pre-configured policy, and triggering the selected service card to generate an Initiator Cookie and IKE negotiation initiating packet containing the Initiator Cookie, sending the IKE negotiation initiating packet to a second apparatus; saving, by the first apparatus, the mapping between the Initiator Cookie and the service card; receiving, by the first apparatus, an IKE negotiation response packet sent by the second apparatus, wherein the IKE negotiation response packet contains the Initiator Cookie and a Responder Cookie generated by the second apparatus, determining the service card corresponding to the Initiator Cookie contained in the IKE negotiation response packet, sending the IKE negotiation response packet to the service card, and saving the mapping among the Initiator Cookie, the Responder Cookie and the service card; and sending, by the service card corresponding to the Initiator Cookie and the Responder Cookie, a subsequent IKE negotiation initiating packet containing the Initiator Cookie and the Responder Cookie to the second apparatus to continue IKE negotiation.