Cisco IOS XR User Manual

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-57
Cisco IOS XR System Security Configuration Guide
Configuring IP Security VPN Monitoring
The following sections describe how to configure IP Security (IPSec) VPN monitoring:
• Adding the Description of an IKE Peer, page SC-57 (optional)
• Clearing a Crypto Session, page SC-58 (optional)
Adding the Description of an IKE Peer
This task allows you to add the description of an IKE peer to an IPSec VPN session.
SUMMARY STEPS
1. configure
2. crypto isakmp peer {address ip-address | hostname hostname} [description line | vrf fvrf-name]
3. description line-of-description
4. end
or
commit
5. show crypto isakmp peers [ip-address | vrf vrf-name]
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto isakmp peer {address ip-address | hostname
hostname } [description line | vrf fvrf-name ]
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp peer
address 40.40.40.2
RP/0/RP0/CPU0:router(config-isakmp-peer)
Enables an IPSec peer for IKE querying of
authentication, authorization, and accounting
(AAA) for tunnel attributes in aggressive mode and
enters ISAKMP peer configuration mode.
Step 3
description line-of-description
Example:
RP/0/RP0/CPU0:router(config-isakmp-peer)#
description citeA
Adds a description for an IKE peer.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.