This topic describes considerations and steps for configuring the IKE daemon.
The IKE daemon's purpose is to manage dynamic IPSec tunnels and to provide a network management interface (NMI) for monitoring and controlling IP filtering and IPSec. The IKE daemon is not involved in the actual filtering, encapsulation, or decapsulation of packets. The IKE daemon is not required for the configuration or use of IP filters when no IpDynVpnAction statements are used. However, because the IKE daemon processes NMI monitoring requests, it must be running to gather monitoring data for IP filters, manual Security Associations, or dynamic Security Associations. To start the IKE daemon, it must be able to connect to the Policy Agent. For information about this requirement, see Policy Agent considerations. For more information about the IPSec network management interface, see z/OS Communications Server: IP Programmer's Guide and Reference.