Cisco IOS XR

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE for Locally Sourced and Destined Traffic
SC-60
Cisco IOS XR System Security Configuration Guide
Step 5
self-identity {address | fqdn | user-fqdn user-fqdn }
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# self-identity
user-fqdn user@vpn.com
Defines the identity that the local IKE uses to
identify itself to the remote peer.
• Use the address keyword to specify the IP
address of the local endpoint.
• Use the fqdn keyword to specify the fully
qualified domain name (FQDN) of the host.
• Use the user-fqdn keyword to specify that the
user FQDN was sent to the remote endpoint.
Step 6
keyring keyring-name
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# keyring
vpnkeyring
Configures a keyring with an ISAKMP profile.
• Use the keyring-name argument to specify the
keyring name, which must match the keyring
name that was defined in the global
configuration.
Command or Action Purpose