The Internet Key Exchange protocol (IKE) can include subprotocols for establishing the SAs (Security Associations) and for key management.
IKE uses two subprotocols: Oakley for the authentication of partners and key administration, and ISAKMP for managing the SAs.