Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Configure the ISAKMP Profile
SC-141
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Step 8
set interface {tunnel-ipsec intf-index |
service-gre intf-index | service-ipsec intf-index}
Example:
RP/0/RP0/CPU0:router(config-isa-prof-match)# set
interface tunnel-ipsec 50
or
RP/0/0/CPU0:router(config-isa-prof-match)# set
service-gre 34
• set interface tunnel-ipsec command is
available only if you previously selected the
local keyword—Predefines the interface
instance when IKE negotiates for IPSec service
associations (SAs) for the traffic that is locally
sourced or terminated and the local endpoint is
the IKE responder.
• set interface service-gre and set interface
service-ipsec commands are available only on
the Cisco
XR 12000 Series Router—Predefines
the interface instances when IKE negotiates for
IPSec SAs for the traffic that is remotely
sourced and terminated.
• intf-index argument range differs based on
whether you configure a tunnel or a service:
–
tunnel = 0 - 429496729
–
service = 1-65535
Command or Action Purpose
To Next Page
Loading...
