The connection endpoints of a VPN authenticate and encrypt (or decrypt) IP traffic for the connection, and also provides key management with the Internet Key Exchange (IKE) protocol.