18-11
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter18 Internet Key Exchange
Internet Key Exchange (IKE)
Group Policy Lookup
Authorization Policy
Specify an authorization policy that controls access to group policy
information on the AAA server.
•default—Choose default if you want to grant access to group
policy lookup information.
•Policyname—To specify a policy, choose an existing policy in
the list.
•Add—Click Add to create a policy in the displayed dialog.
User Authentication Policy Check User Authentication Policy if you want to allow XAuth
logins, or if you want to specify a user authentication policy to use
for XAuth logins. Choose one of the following options:
•default—Choose default if you want to allow XAuth logins.
•Policyname—If policies have been configured on the router,
they are displayed in this list and you can select a policy to use.
Click Add to create a policy in the displayed dialog and use it in this
IKE policy.
Dead Peer Discovery Click Dead Peer Discovery to enable the router to send dead peer
detection (DPD) messages to Easy VPN Remote clients. If a client
does not respond to DPD messages, the connection with it is
dropped.
•Keepalive Interval—Specify the number of seconds between
DPD messages in the Keepalive Interval field. The range is
from 10 to 3600 seconds.
•Retry Interval—Specify the number of seconds between retries
if DPD messages fail in the Retry Interval field. The range is
from 2 to 60 seconds.
Dead peer discovery helps manage connections without
administrator intervention, but it generates additional packets that
both peers must process in order to maintain the connection.
Table18-1 Add or Edit IKE Profile Fields
Element Description