Cisco IOS XR User Manual

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
How to Implement IKE for Cisco IPSec VPN SPAs on Cisco IOS XR Software
SC-66
Cisco IOS XR System Security Configuration Guide
Step 5
self-identity {address | fqdn | user-fqdn user-fqdn }
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# self-identity
user-fqdn user@vpn.com
Defines the identity that the local IKE uses to
identify itself to the remote peer.
• Use the address keyword to specify the IP
address of the local endpoint.
• Use the fqdn keyword to specify the fully
qualified domain name (FQDN) of the host.
• Use the user-fqdn keyword to specify that the
user FQDN was sent to the remote endpoint.
Step 6
keyring keyring-name
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# keyring
vpnkeyring
Configures a keyring with an ISAKMP profile.
• Use the keyring-name argument to specify the
keyring name, which must match the keyring
name that was defined in the global
configuration.
Command or Action Purpose

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.