Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-120
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Note In this step, you can identify up to five previously configured ISAKMP policies to match.
4. match identity local-address A.B.C.D IP address
5. (Optional) Repeat Step 2 through Step 4, as needed, to configure additional policy sets for specific
IP addresses.
6. end
or
commit
7. exit
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Enters global configuration mode.
Step 2
crypto isakmp policy-set policy-name
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp
policy-set policy_1
Enters the global crypto configuration mode to
create a new policy set by naming it.
Step 3
policy policy number
Example:
RP/0/RP0/CPU0:router(config-isakmp-pol-set)# policy
10
Identifies up to five ISAKMP policies by the match
priority number you gave them in
Configuring IKE
Policies, page 117. (A policy set can contain up to
five policies.)
Only these policies can be part of the IKE
negotiation between the local and the remote peer.
Step 4
match identity local-address A.B.C.D IP address
Example:
RP/0/RP0/CPU0:router(config-isakmp-pol-set)# match
identity local-address 10.56.8.10
Identifies the SVI tunnel source to be restricted to a
particular policy set.
Note When users connect to the IP address
identified in this step, the ISAKMP policies
configured in the policy set defined in
Step 2
becomes part of the IKE negotiation.
Step 5
(Optional) Repeat Step 2 through Step 4, as needed, to
configure additional policy sets for specific IP addresses.
You may use either multiple ISAKMP policies or
multiple IP addresses to create the match.
To Next Page
Loading...
Need help?
General
