Index
SC-221
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
hitless key rollover, configuring SC-157
host names, configuring CA interoperability
(examples)
SC-66
I
IKE (Internet Key Exchange) security protocol
algorithms
encryption
SC-118
hash SC-118
options SC-110
authentication methods SC-111, SC-118
DH (Diffie-Hellman)
group identifier, specifying
SC-118
IKE policy parameter SC-109
enabling and disabling SC-116
extended authentication SC-113
group identifier, specifying SC-118
ISAKMP identity, configuring SC-112
negotiations SC-110
policies
configuring
SC-117
configuring (example) SC-144
identifying SC-118
multiple SC-111
parameters SC-109, SC-110
purpose SC-108
viewing SC-119
requirements
RSA encrypted nonces method
SC-112
RSA signatures method SC-112
supported standards SC-107
See also IPSec; RSA encrypted nonces; SAs
IKE (Internet Key Exchange Security Protocol)
Advanced Encryption Standard (AES)
definition
SC-107
algorithms
encryption
SC-118
hash SC-118
MD5 (Message Digest 5) SC-107
options SC-110
SHA (Secure Hash Algorithm), definition SC-108
authentication methods SC-111, SC-118
Call Admission Control (CAC)
limiting CPU resources consumed
SC-114
Call Admission Control (CAC) definition SC-114
configuring
IKE security association (SA) limit for call
admission control
SC-129
ISAKMP identity SC-112
policies SC-117
definition SC-107
DES (Data Encryption Standard)
definition
SC-107
DH (Diffie-Hellman)
IKE policy parameter
SC-109
specifying the group identifier SC-118
DPD (Dead Peer Detection)
periodic message
SC-116
enabling and disabling SC-116
enabling config-isakmp command mode SC-118
extended authentication SC-113
Internet Security Association and Key Management
Protocol (ISAKMP)
definition
SC-107
ISAKMP peer description SC-115
keyring configuration mode enablement SC-124
negotiations SC-110
Oakley Key Exchange Protocol definition SC-107
policies
configuring (example)
SC-144
identifying SC-118
multiple SC-111
parameters SC-110
purpose SC-108
viewing SC-119
Public Key Cryptographic Protocol
Diffie-Hellman
SC-107