How to Implement IKE for Cisco IPSec VPN SPAs on Cisco IOS XR Software
Command or Action
Step 5
self-identity {address | fqdn | user-fqdn user-fqdn }
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# self-identity
user-fqdn user@vpn.com
Step 6
keyring keyring-name
Example:
RP/0/RP0/CPU0:router(config-isa-prof)# keyring
vpnkeyring
Cisco IOS XR System Security Configuration Guide
SC-66
Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Purpose
Defines the identity that the local IKE uses to
identify itself to the remote peer.
Use the address keyword to specify the IP
•
address of the local endpoint.
Use the fqdn keyword to specify the fully
•
qualified domain name (FQDN) of the host.
•
Use the user-fqdn keyword to specify that the
user FQDN was sent to the remote endpoint.
Configures a keyring with an ISAKMP profile.
•
Use the keyring-name argument to specify the
keyring name, which must match the keyring
name that was defined in the global
configuration.