Question: what is the difference between ipsec phase 1 and phase 2?
Answer: The IKE phase 1 tunnel is only used for management traffic. We use this tunnel as a secure method to establish the second tunnel called the IKE phase 2 tunnel or IPsec tunnel and for management traffic like keepalives. IKE builds the tunnels for us but it doesn't authenticate or encrypt user data.