SC-19
Cisco IOS XR System Security Configuration Guide
Implementing Internet Key Exchange Security
Protocol on Cisco IOS XR Software
Internet Key Exchange (IKE) is a key management protocol standard that is used in conjunction with the
IP Security (IPSec) standard. IPSec is a feature that provides robust authentication and encryption of IP
packets.
IKE is a hybrid protocol that implements the Oakley key exchange and the Skeme key exchange inside
the Internet Security Association and Key Management Protocol (ISAKMP) framework. (ISAKMP,
Oakley, and Skeme are security protocols implemented by IKE.)
IPSec can be configured without IKE, but IKE enhances IPSec by providing additional features,
flexibility, and ease of configuration for the IPSec standard.
This module describes the tasks that you need to implement IKE on your Cisco IOS XR network.
Note For a complete description of the IKE commands used in this chapter, see the Internet Key Exchange
Security Protocol Commands on Cisco IOS XR Software module of the Cisco IOS XR System Security
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index, or search online.
Feature History for Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Release Modification
Release 2.0 This feature was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 Support was added for the Cisco XR 12000 Series Router.
Release 3.3.0 No modification.
Release 3.4.0
• Support was added for IKE for the Cisco XR 12000 Series Router
IPSec VPN SPA.
• Support was added to implement IKE for locally sourced and destined
traffic on both the Cisco CRS-1 and Cisco XR 12000 Series Router.
Release 3.5.0
• The IP Security VPN Monitoring feature was added.
• Banner, Auto-Update, and Browser-Proxy features were added to aid
in managing a Cisco Easy VPN remote device.
• Pushing a configuration URL through a mode-configuration exchange
feature was added.
To Next Page
Loading...
Need help?
General
