The remainder of this paper is organized as follows. Section 2 outlines the OpenBSD IPsec architecture. Section 3 gives a brief overview of the IKE protocol, while Section 4 discusses the design and implementation of the OpenBSD IKE implementation, and Section 5 presents the security policy mechanism. Related and future work is presented in Section 6.