Manually Configuring Rsa Keys - Cisco IOS XR Configuration Manual

How to Implement IKE Security Protocol Configurations for IPSec Networks
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
crypto isakmp client configuration group group-name
Example:
RP/0/RP0/CPU0:router(config)# crypto isakmp client
configuration group cisco
RP/0/RP0/CPU0:router(config-group)#
Step 3
configuration url { url }
Example:
RP/0/RP0/CPU0:router(config-group)# configuration
url http://10.10.8.8/easy.cfg
Step 4
configuration version { version-number }
Example:
RP/0/RP0/CPU0:router(config-group)# configuration
version 10

Manually Configuring RSA Keys

Manually configure RSA keys when you specify RSA encrypted nonces as the authentication method in
an IKE policy and you are not using a CA.
To manually configure RSA keys, perform these tasks at each IPSec peer that uses RSA encrypted
nonces in an IKE policy:
•
•
•
RSA Keys Generation
For instructions on how to generate RSA keys, see the
in the
Configuring ISAKMP Identity
This task configures the ISAKMP identity of a peer.
Remember to repeat these tasks at each peer that uses preshared keys in an IKE policy.
Cisco IOS XR System Security Configuration Guide
SC-44
RSA Keys Generation, page SC-44
Configuring ISAKMP Identity, page SC-44
Configuring RSA Public Keys of All the Other Peers, page SC-46
Implementing Certification Authority Interoperability on Cisco IOS XR Software
Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Purpose
Enters global configuration mode.
Specifies which group's policy profile is defined and
enters ISAKMP group configuration mode.
• If no specific group matches, you are
automatically given the default group's policy.
• The default group is also used for the other
attributes so they must also be checked and
updated.
Specifies the URL the remote device must use to get
the configuration from the server.
Specifies the version of the configuration.
• The version-number argument is an unsigned
integer in the range of 1 to 10.
"Generating an RSA Key Pair" section on page 7
module.