The IKE protocol is used to establish an SA for IPsec auto-negotiation, which can support identity authentication when the address of the initiator of the negotiation changes dynamically.