Cisco IOS XR

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-51
Cisco IOS XR System Security Configuration Guide
3. end
or
commit
4. show crypto isakmp call admission statistics
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto isakmp call admission limit
{in-negotiation-sa
number | sa number }
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp call
admission limit sa 25
Specifies the maximum number of IKE SAs that the
router can establish before IKE begins rejecting new
SA requests.
• Use the in-negotiation-sa keyword to specify
the maximum number of in-negotiation
(embryonic) IKE security associations (SAs)
that the router can establish before IKE begins
rejecting new SA requests. The range for the
number argument is from 1 to 100000.
• Use the sa keyword to specify the maximum
number of active IKE SAs that the router can
establish. The range for the number argument is
from 1 to 100000.