A two-phase process by which an initiating key server communicates with a responding key server. If the negotiations are successful, the key servers establish a dynamic virtual private network (VPN) connection that is between the two agreed-on endpoints. This approach, which is directed by the Internet Key Exchange (IKE) protocols, maintains the secrecy of keys.