Abstract: An Internet Key Exchange (IKE) negotiation control method, device and system are provided. In the method, a receiving end receives an IKE negotiation message sent by an initiating end, and parses the IKE negotiation message to obtain IKE negotiation message information; in a case that a current IKE negotiation is in an aggressive mode, the receiving end acquires triple information of message and initiating end identity information according to the IKE negotiation message information, and searches for and acquires a virtual negotiation interface, matched with the initiating end, on the receiving end according to the triple information of message and the initiating end identity information. An IKE negotiation control device and system are also provided.