Isakmp Policy Configuration; Configuring Isakmp Policy - Cisco ASR 5000 Series 3G Home NodeB Administration Manual

▀ ISAKMP Policy Configuration

ISAKMP Policy Configuration
This section provides instructions for configuring ISAKMP policies on the system. ISAKMP policy configuration is
only required if the crypto map type is either ISAKMP or Dynamic.
Important:
For more information on commands that configure additional parameters and options, refer to the Context Configuration
Mode Commands and ISAKMP Configuration Mode Commands chapters in the Command Line Interface Reference.
To configure the ISAKMP policy for IPSec:
Step 1
Configure crypto transform set by applying the example configuration in the
Step 2
Verify your ISAKMP policy configuration by following the steps in the
section.
Step 3 Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode
command
save configuration
System Administration Guide and the Command Line Interface Reference.

Configuring ISAKMP Policy

Use the following example to create the ISAKMP policy on your system:
configure
context <ctxt_name>
ikev1 policy <priority>
encryption { 3des-cbc | des-cbc }
hash { md5 | sha1 }
group { 1 | 2 | 3 | 4 | 5 }
lifetime <time>
end
Notes:
 <
ctxt_name
 <
priority
 For more information on parameters, refer to the ISAKMP Configuration Mode Commands chapter in the
Command Line Interface Reference.
▄ Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
154
This section provides the minimum instruction set for configuring ISAKMP policies on the system.
. For additional information on how to verify and save configuration files, refer to the
> is the system context in which you wish to create and configure the ISAKMP policy.
> dictates the order in which the ISAKMP policies are proposed when negotiating IKE SAs.
Configuring ISAKMP Policy
Verifying the ISAKMP Policy Configuration
IP Security
section.
OL-25069-03