Cisco 4G-LTE-ANTM-O-3 Installation Guide Page 368

  • Download
  • Add to my manuals
  • Print
  • Page
    / 444
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 367
SUMMARY STEPS
1.
crypto isakmp policy priority
2.
encryption {des | 3des | aes | aes 192 | aes 256}
3.
hash {md5 | sha}
4.
authentication {rsa-sig | rsa-encr | pre-share}
5.
group {1 | 2 | 5}
6.
lifetime seconds
7.
exit
DETAILED STEPS
PurposeCommand or Action
Creates an IKE policy that is used during IKE negotiation. The
priority is a number from 1 to 10000, with 1 being the highest.
crypto isakmp policy priority
Example:
Router(config)# crypto isakmp policy 1
Step 1
Also enters the Internet Security Association Key and Management
Protocol (ISAKMP) policy configuration mode.
Specifies the encryption algorithm used in the IKE policy.encryption {des | 3des | aes | aes 192 | aes 256}
Step 2
Example:
Router(config-isakmp)# encryption 3des
The example specifies 168-bit data encryption standard (DES).
Specifies the hash algorithm used in the IKE policy.hash {md5 | sha}
Step 3
Example:
Router(config-isakmp)# hash md5
The example specifies the Message Digest 5 (MD5) algorithm. The
default is Secure Hash standard (SHA-1).
Specifies the authentication method used in the IKE policy.authentication {rsa-sig | rsa-encr | pre-share}
Step 4
Example:
Router(config-isakmp)# authentication
pre-share
The example specifies a pre-shared key.
Specifies the Diffie-Hellman group to be used in an IKE policy.group {1 | 2 | 5}
Example:
Router(config-isakmp)#group 2
Step 5
Specifies the lifetime, in seconds, for an IKE security association
(SA).
lifetime seconds
Example:
Router(config-isakmp)# lifetime 480
Step 6
Acceptable values are from 60 to 86400.
Cisco 800 Series Integrated Services Routers Software Configuration Guide
340 OL-31704-02
Configuring a VPN Using Easy VPN and an IPSec Tunnel
Configuring the IKE Policy
Page view 367
1 2 ... 363 364 365 366 367 368 369 370 371 372 373 ... 443 444

Comments to this Manuals

No comments