Cisco Systems 2.5 Add or Edit IKE Policy

Chapter18 Internet Key Excha nge
Internet Key Exchange (IKE)
18-4
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Add or Edit IKE Policy
Add or edit an IKE policy in this window.
Note • Not all routers support all encryption types. Unsupported types will not
appear in the screen.
•Not all IOS images support all the encryption types that Cisco SDM supports.
Types unsupported by the IOS image will not appear in the screen.
•If hardware encryption is turned on, only those encryption types supported by
both hardware encryption and the IOS image will appear in the screen.
Priority
An integer value that specifies the priority of this policy relative to the other
configured IKE policies. Assign the lowest numbers to the IKE policies that you
prefer that the router use. The router will offer those po licies first during
negotiations.
Encryption
The type of encryption that should be used to communicate this IKE policy. Cisco
SDM supports a variety of encryption types, listed in order of security. The more
secure an encryption type, the more processing time it requires.
Note If your router does not support an encryption type, the type will not appear in the
list.
Cisco SDM supports the following types of encryption:
•Data Encryption Standard (DES)—This form of encryption supports 56-bit
encryption.
•Triple Data Encryption Standard (3DES)—This is a stronger form of
encryption than DES, supporting 168-bit encryption.
•AES-128—Advanced Encryption Standard (AES) encryption with a 128-bit
key. AES provides greater security than DES and is computationally more
efficient than triple DES.