Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 141

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Command or Action
Step 6
rsa-pubkey {address address | name fqdn} [encryption
| signature]
Example:
RP/0/RP0/CPU0:router(config-keyring)# rsa-pubkey
name host.vpn.com
RP/0/RP0/CPU0:router(config-keyring)# rsa-pubkey
name host.vpn.com
Step 7
key-string key-string
Example:
RP/0/RP0/CPU0:router(config-pubkey)# key-string
005C300D 06092A86 4886F70D 01010105
Step 8
quit
Example:
RP/0/RP0/CPU0:router(config-pubkey)# quit
Step 9
end
or
commit
Example:
RP/0/RP0/CPU0:router(config)# end
or
RP/0/RP0/CPU0:router(config)# commit
OL-20382-01
How to Implement IKE Security Protocol Configurations for IPSec Networks
Purpose
Defines a Rivest, Shamir, and Adelman (RSA)
public key by address or hostname.
•
•
•
•
Manually specifies the RSA public key of a remote
peer.
Returns to global configuration mode.
Saves configuration changes.
•
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Use the address keyword to specify the IP
address of the RSA public key of the remote
peer. The address argument is the IP address of
the remote RSA public key of the remote peer
that you manually configure.
Use the name keyword to specify the FQDN of
the peer.
(Optional) Use the encryption keyword to
specify that the key is used for encryption.
(Optional) Use the signature keyword to
specify that the key is used for a signature. The
signature keyword is the default.
When you issue the end command, the system
prompts you to commit changes:
Uncommitted changes found, commit them
before exiting (yes/no/cancel)?
[cancel]:
Entering yes saves configuration changes to
–
the running configuration file, exits the
configuration session, and returns the
router to EXEC mode.
– Entering no exits the configuration session
and returns the router to EXEC mode
without committing the configuration
changes.
Entering cancel leaves the router in the
–
current configuration session without
exiting or committing the configuration
changes.
Use the commit command to save the
configuration changes to the running
configuration file and remain within the
configuration session.
SC-135