Configuring The Ipsec Ike Policies - Cisco ISA500 Series Administration Manual

VPN
Configuring the Site-to-Site VPN
STEP 6
STEP 7
NOTE
NOTE
STEP 1
STEP 2
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
The DPD should be enabled if you want to use the Redundant
NOTE
Gateway feature for the IPSec VPN connection.
Click OK to save your settings.
Click Save to apply your settings.
Next Steps:
• To maintain the IKE policies, click Site-to-Site -> IKE Policies. See
Configuring the IPSec IKE Policies, page
• To maintain the Tranform policies, click Site-to-Site -> Transform Policies.
See Configuring the IPSec Transform Policies, page

Configuring the IPSec IKE Policies

The Internet Key Exchange (IKE) protocol is a negotiation protocol that includes an
encryption method to protect data and ensure privacy. It is also an authentication
method to verify the identity of devices that are trying to connect to your network.
You can create IKE policies to define the security parameters (such as
authentication of the peer, encryption algorithms, and so forth) to be used for a
VPN tunnel.
The security appliance supports up to 16 IKE policies.
Click VPN -> Site-to-Site -> IKE Policies.
The IKE Policies window opens. The default and custom IKE policies are listed in
the table.
To add a new IKE policy, click Add.
Other options: To edit an entry, click Edit. To delete an entry, click Delete. The
default IKE policy (DefaultIke) can not be edited or deleted.
254.
256.
8
254