Cisco IOS XR

Contents
iv
Cisco IOS XR System Security Configuration Guide
ISAKMP Identity SC-26
ISAKMP Profile Overview SC-26
Mask Preshared Keys SC-27
Preshared Keys Using a AAA Server SC-27
Internet Key Exchange Mode Configuration SC-28
Banner, Auto-Update, and Browser-Proxy SC-29
Pushing a Configuration URL Through a Mode-Configuration Exchange SC-29
Internet Key Exchange Extended Authentication SC-30
Call Admission Control SC-30
Information About IP Security VPN Monitoring SC-31
Information About IKE for the Cisco IPSec VPN SPA on Cisco IOS XR Software SC-32
IPSec Dead Peer Detection Periodic Message Option SC-32
How to Implement IKE Security Protocol Configurations for IPSec Networks SC-32
Enabling or Disabling IKE SC-33
Configuring IKE Policies SC-34
Defining Group Policy Information for Mode Configuration SC-36
Configuring a Banner SC-40
Configuring Auto-Upgrade SC-40
Configuring a Browser Proxy SC-41
Configuring a Browser-Proxy Map to a Group SC-42
Configuring the Pushing of a Configuration URL Through a Mode-Configuration Exchange SC-43
Manually Configuring RSA Keys SC-44
Configuring ISAKMP Preshared Keys in ISAKMP Keyrings SC-48
Configuring Call Admission Control SC-50
Configuring Crypto Keyrings SC-54
Configuring IP Security VPN Monitoring SC-57
How to Implement IKE for Locally Sourced and Destined Traffic SC-58
Configuring the ISAKMP Profile for Locally Sourced and Destined Traffic SC-58
How to Implement IKE for Cisco IPSec VPN SPAs on Cisco IOS XR Software SC-62
Configuring a Periodic Dead Peer Detection Message SC-63
Configuring the ISAKMP Profile for Service Interfaces SC-64
Configuration Examples for Implementing IKE Security Protocol SC-68
Creating IKE Policies: Example SC-69
Configuring a service-ipsec Interface with a Dynamic Profile: Example SC-69
Configuring Easy VPN with a Local AAA: Example SC-70
Configuring VRF-Aware: Example SC-71
Additional References SC-73
Related Documents SC-73
Standards SC-73