Cisco IOS XR

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE Security Protocol Configurations for IPSec Networks
SC-57
Cisco IOS XR System Security Configuration Guide
Configuring IP Security VPN Monitoring
The following sections describe how to configure IP Security (IPSec) VPN monitoring:
• Adding the Description of an IKE Peer, page SC-57 (optional)
• Clearing a Crypto Session, page SC-58 (optional)
Adding the Description of an IKE Peer
This task allows you to add the description of an IKE peer to an IPSec VPN session.
SUMMARY STEPS
1. configure
2. crypto isakmp peer {address ip-address | hostname hostname} [description line | vrf fvrf-name]
3. description line-of-description
4. end
or
commit
5. show crypto isakmp peers [ip-address | vrf vrf-name]
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto isakmp peer {address ip-address | hostname
hostname } [description line | vrf fvrf-name ]
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp peer
address 40.40.40.2
RP/0/RP0/CPU0:router(config-isakmp-peer)
Enables an IPSec peer for IKE querying of
authentication, authorization, and accounting
(AAA) for tunnel attributes in aggressive mode and
enters ISAKMP peer configuration mode.
Step 3
description line-of-description
Example:
RP/0/RP0/CPU0:router(config-isakmp-peer)#
description citeA
Adds a description for an IKE peer.