Cisco IOS XR User Manual

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Additional References
SC-73
Cisco IOS XR System Security Configuration Guide
crypto isakmp profile isakmp-prof7
keyring kr12
match identity address 10.0.85.2/32 vrf FVRF
set interface service-ipsec16
!
!
crypto ipsec transform-set tsfm5
transform ah-sha-hmac esp-aes
crypto ipsec transform-set tsfm15
transform esp-3des esp-md5-hmac
crypto ipsec transform-set tsfm16
transform esp-aes esp-sha-hmac
crypto ipsec profile ipsec-prof15
set type dynamic
match acl-2_5-1 transform-set tsfm15
!
crypto ipsec profile ipsec-prof16
match acl-2_5-4 transform-set tsfm16
!
Additional References
The following sections provide references related to implementing the IKE security protocol.
Related Documents
Standards
Related Topic Document Title
IKE security protocol commands: complete
command syntax, command modes, command
history, defaults, usage guidelines, and examples
Internet Key Exchange Security Protocol Commands on Cisco IOS XR
Software module in the Cisco IOS XR System Security Command
Reference, Release 3.5
IPSec conceptual information and configuration
tasks
Implementing IPSec Network Security on Cisco IOS XR Software module
in the Cisco IOS XR System Security Configuration Guide, Release 3.5
Standards Title
No new or modified standards are supported by this
feature, and support for existing standards has not been
modified by this feature.
—

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.