Implementing IPSec Network Security on Cisco IOS XR Software
Configuring Reverse-Route Injection in a Crypto Profile
This tasks shows how to configure reverse-route injection in a crypto profile.
SUMMARY STEPS
1.
2.
3.
4.
5.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/0/CPU0:router# configure
Step 2
crypto ipsec profile name
Example:
RP/0/0/CPU0:router(config)# crypto ipsec profile
myprofile
RP/0/0/CPU0:router(config-myprofile)#
Step 3
reverse-route
Example:
RP/0/0/CPU0:router(config-myprofile)# reverse-route
configure
crypto ipsec profile name
reverse-route
end
or
commit
show route [vrf vrf name]
How to Implement General IPSec Configurations for IPSec Networks
Purpose
Enters global configuration mode.
Creates or modifies a crypto profile entry and enters
profile configuration mode.
Use the name argument to specify the name of
•
an IPSec profile. Maximum length is 32
characters.
Creates source proxy information for a crypto
profile entry.
Cisco IOS XR System Security Configuration Guide
SC-127