Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-44
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Manually Configuring RSA Keys
Manually configure RSA keys when you specify RSA encrypted nonces as the authentication method in
an IKE policy and you are not using a CA.
To manually configure RSA keys, perform these tasks at each IPSec peer that uses RSA encrypted
nonces in an IKE policy:
• RSA Keys Generation, page SC-44
• Configuring ISAKMP Identity, page SC-44
• Configuring RSA Public Keys of All the Other Peers, page SC-46
RSA Keys Generation
For instructions on how to generate RSA keys, see the “Generating an RSA Key Pair” section on page 7
in the Implementing Certification Authority Interoperability on Cisco IOS XR Software module.
Configuring ISAKMP Identity
This task configures the ISAKMP identity of a peer.
Remember to repeat these tasks at each peer that uses preshared keys in an IKE policy.
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto isakmp client configuration group
group-name
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp client
configuration group cisco
RP/0/RP0/CPU0:router(config-group)#
Specifies which group's policy profile is defined and
enters ISAKMP group configuration mode.
• If no specific group matches, you are
automatically given the default group's policy.
• The default group is also used for the other
attributes so they must also be checked and
updated.
Step 3
configuration url {
url
}
Example:
RP/0/RP0/CPU0:router(config-group)# configuration
url http://10.10.8.8/easy.cfg
Specifies the URL the remote device must use to get
the configuration from the server.
Step 4
configuration version {
version-number
}
Example:
RP/0/RP0/CPU0:router(config-group)# configuration
version 10
Specifies the version of the configuration.
• The version-number argument is an unsigned
integer in the range of 1 to 10.
To Next Page
Loading...
Need help?
General
