Vpn Global Settings: Ike - Cisco ROUTER-SDM-CD User Manual

Chapter 16 VPN Global Settings
Table 16-1 VPN Global Settings Fields
Element
IPSec Security Association (SA)
Lifetime (Kilobytes)
Syslog Messages for Easy VPN
Connections

VPN Global Settings: IKE

Enable IKE
Caution
Enable Aggressive mode
Identity (of this router)
OL-4015-12
Description
The number of kilobytes that the router can send over the VPN
connection before the IPSec SA expires. The SA will be renewed
after the shortest lifetimes is reached.
This field can have the following values:
Enabled—Syslog messages are enabled for all Easy VPN
•
connections.
Enabled for groups name, name—Syslog messages are enabled
•
for the groups listed.
Disabled—Syslog messages are disabled.
•
This window lets you specify global settings for IKE and IPSEC.
Leave this box checked if you want to use VPN.
If IKE is disabled, VPN configurations will not work.
The Aggressive Mode feature allows you to specify RADIUS tunnel attributes for
an IPSec peer and to initiate an IKE aggressive mode negotiation with the tunnel
attributes.
This field specifies the way the router will identify itself. Select either IP address
or host name.
Cisco Router and Security Device Manager 2.5 User's Guide
VPN Global Settings
16-3