Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 43)

Intranet VPN Business Scenario 3-13

Configuring IKE Policies

Note This section only contains basic conﬁguration information for enabling encryption

services on the GRE tunnel conﬁgured in the “Step 1—Conﬁguring the Tunnel” section on

page 3-4. Refer to the “IP Security and Encryption” part of the Security Conﬁguration

Guide and the Security Command Reference publications for detailed conﬁguration

information on IPSec, IKE, and CA.

Refer to the Integrated Service Adapter and Integrated Service Module Installation and

Conﬁguration publication for detailed conﬁguration information on the ISM.

Conﬁguring IKE Policies

IKE is enabled by default. IKE does not have to be enabled for individual interfaces, but is

enabled globally for all interfaces in the router. You must create IKE policies at each peer.

An IKE policy deﬁnes a combination of security parameters to be used during the IKE

negotiation.

You can create multiple IKE policies, each with a different combination of parameter

values. If you do not conﬁgure any IKE policies, the router uses the default policy, which

is always set to the lowest priority, and which contains each parameter’s default value.

Foreach policythat you create, you assign a unique priority (1 through 10,000,with1 being

the highest priority). You can conﬁgure multiple policies on each peer—but at least one of

these policies must contain exactly the same encryption, hash, authentication, and

Difﬁe-Hellman parameter values as one of the policies on the remote peer. If you do not

specify a value for a parameter, the default value is assigned.

Note The default policy and the default values for conﬁgured policies do not show up in

the conﬁguration when you issue a show running-conﬁg EXEC command. Instead, to see

the default policy and any default values within conﬁgured policies, use the show crypto

isakmp policy EXEC command.

This section contains basic steps to conﬁgure IKE policies and includes the followingtasks:

1 Creating Policies

2 Additional Conﬁguration Required for IKE Policies

3 Verifying IKE Policies

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 43