Implementing IPSec Network Security on Cisco IOS XR Software
How to Implement General IPSec Configurations for IPSec Networks
SC-127
Cisco IOS XR System Security Configuration Guide
Configuring Reverse-Route Injection in a Crypto Profile
This tasks shows how to configure reverse-route injection in a crypto profile.
SUMMARY STEPS
1. configure
2. crypto ipsec profile name
3. reverse-route
4. end
or
commit
5. show route [vrf vrf name]
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto ipsec profile
name
Example:
RP/0/0/CPU0:router(config)# crypto ipsec profile
myprofile
RP/0/0/CPU0:router(config-myprofile)#
Creates or modifies a crypto profile entry and enters
profile configuration mode.
• Use the name argument to specify the name of
an IPSec profile. Maximum length is 32
characters.
Step 3
reverse-route
Example:
RP/0/0/CPU0:router(config-myprofile)# reverse-route
Creates source proxy information for a crypto
profile entry.