Cisco IOS XR Configuration Manual page 45

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
•
•
•
•
•
•
•
•
Enabling or Disabling IKE
This task enables or disables the Internet Key Exchange protocol.
IKE is disabled by default. IKE need not be enabled for individual interfaces, but it is enabled globally
for all interfaces at the router.
SUMMARY STEPS
1.
2.
3.
4.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
crypto isakmp
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp
Configuring a Browser Proxy, page SC-41
Configuring a Browser-Proxy Map to a Group, page SC-42
Configuring the Pushing of a Configuration URL Through a Mode-Configuration Exchange,
page SC-43 (optional)
Manually Configuring RSA Keys, page SC-44
Configuring ISAKMP Preshared Keys in ISAKMP Keyrings, page SC-48
IKE parameters)
Configuring Call Admission Control, page SC-50
Configuring Crypto Keyrings, page SC-54
Configuring IP Security VPN Monitoring, page SC-57
configure
crypto isakmp
no crypto isakmp
end
or
commit
How to Implement IKE Security Protocol Configurations for IPSec Networks
(optional)
(optional)
(optional, depending on IKE parameters)
Purpose
Enters global configuration mode.
Globally enables IKE at the peer router.
Cisco IOS XR System Security Configuration Guide
(optional, depending on
SC-33