Cisco IOS XR User Manual

Contents
iv
Cisco IOS XR System Security Configuration Guide
ISAKMP Identity SC-26
ISAKMP Profile Overview SC-26
Mask Preshared Keys SC-27
Preshared Keys Using a AAA Server SC-27
Internet Key Exchange Mode Configuration SC-28
Banner, Auto-Update, and Browser-Proxy SC-29
Pushing a Configuration URL Through a Mode-Configuration Exchange SC-29
Internet Key Exchange Extended Authentication SC-30
Call Admission Control SC-30
Information About IP Security VPN Monitoring SC-31
Information About IKE for the Cisco IPSec VPN SPA on Cisco IOS XR Software SC-32
IPSec Dead Peer Detection Periodic Message Option SC-32
How to Implement IKE Security Protocol Configurations for IPSec Networks SC-32
Enabling or Disabling IKE SC-33
Configuring IKE Policies SC-34
Defining Group Policy Information for Mode Configuration SC-36
Configuring a Banner SC-40
Configuring Auto-Upgrade SC-40
Configuring a Browser Proxy SC-41
Configuring a Browser-Proxy Map to a Group SC-42
Configuring the Pushing of a Configuration URL Through a Mode-Configuration Exchange SC-43
Manually Configuring RSA Keys SC-44
Configuring ISAKMP Preshared Keys in ISAKMP Keyrings SC-48
Configuring Call Admission Control SC-50
Configuring Crypto Keyrings SC-54
Configuring IP Security VPN Monitoring SC-57
How to Implement IKE for Locally Sourced and Destined Traffic SC-58
Configuring the ISAKMP Profile for Locally Sourced and Destined Traffic SC-58
How to Implement IKE for Cisco IPSec VPN SPAs on Cisco IOS XR Software SC-62
Configuring a Periodic Dead Peer Detection Message SC-63
Configuring the ISAKMP Profile for Service Interfaces SC-64
Configuration Examples for Implementing IKE Security Protocol SC-68
Creating IKE Policies: Example SC-69
Configuring a service-ipsec Interface with a Dynamic Profile: Example SC-69
Configuring Easy VPN with a Local AAA: Example SC-70
Configuring VRF-Aware: Example SC-71
Additional References SC-73
Related Documents SC-73
Standards SC-73

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.