Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-136
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Configuring IP Security VPN Monitoring
The following sections describe how to configure IP Security (IPSec) VPN monitoring:
• Adding the Description of an IKE Peer, page 136 (optional)
• Clearing a Crypto Session, page 137 (optional)
Adding the Description of an IKE Peer
This task allows you to add the description of an IKE peer to an IPSec VPN session.
SUMMARY STEPS
1. configure
2. crypto isakmp peer {address ip-address | hostname hostname} [description line | vrf fvrf-name]
3. description line-of-description
4. end
or
commit
5. show crypto isakmp peers [ip-address | vrf vrf-name]
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto isakmp peer {address ip-address | hostname
hostname} [description string | vrf fvrf-name]
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp peer
address 40.40.40.2
RP/0/RP0/CPU0:router(config-isakmp-peer)
Specifies an IPSec peer for the session.
Step 3
description string
Example:
RP/0/RP0/CPU0:router(config-isakmp-peer)#
description citeA
Adds a line of description for an IKE peer.
• Description of peer may be up to 80 characters.
•