Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 147

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Command or Action
Step 8
set interface {tunnel-ipsec intf-index |
service-gre intf-index | service-ipsec intf-index}
Example:
RP/0/RP0/CPU0:router(config-isa-prof-match)# set
interface tunnel-ipsec 50
or
RP/0/0/CPU0:router(config-isa-prof-match)# set
service-gre 34
OL-20382-01
Purpose
•
•
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
How to Configure the ISAKMP Profile
set interface tunnel-ipsec command is
available only if you previously selected the
local keyword—Predefines the interface
instance when IKE negotiates for IPSec service
associations (SAs) for the traffic that is locally
sourced or terminated and the local endpoint is
the IKE responder.
set interface service-gre and set interface
service-ipsec commands are available only on
the Cisco XR 12000 Series Router—Predefines
the interface instances when IKE negotiates for
IPSec SAs for the traffic that is remotely
sourced and terminated.
intf-index argument range differs based on
whether you configure a tunnel or a service:
– tunnel = 0 - 429496729
– service = 1-65535
SC-141