Cisco Systems 4.1 Internet Key Exchange (IKE) Configuration Task

9-50
User Guide for Resource Manager Essentials 4.1
OL-11714-01
Chapter 9 Making and Deploying Configuration Changes Using NetConfig
Using System-defined Tasks
Internet Key Exchange (IKE) Configuration Task
Use the Internet Key Exchange (IKE) Configuration System task to configure IPSec on devices.
The following device categories are supported by this task:
• IOS (including Cable devices)
• PIX OS
For more details, see Table 9-3.
You can enter the details of this task in the IKE Configuration dialog box. (To invoke this dialog box,
see Starting a New NetConfig Job.)
For the features of system-defined tasks and a description of the features of a system-defined task dialog
box, see Understanding the System-defined Task User Interface (Dialog Box).
Group Sub-group Field Description
IOS
Parameters
ISAKMP Action Select to enable, disable, or make no change to ISAKMP.
ISAKMP
Policy
ISAKMP
Policy Priority
Action Select to add, remove, or make no change to ISAKMP policy priority.
Priority
[1-10000]
Enter the policy priority number
Value must be between 1—10000.
Encryption Action Select to enable, disable, or make no change to encryption type.
Type Select the type of encryption for the policy:
• 3des
• des
Hash Action Select to enable, disable, or make no change to the hash algorithm.
Algorithm Select the type of hash algorithm:
• sha
• md5
Authentication Action Select to enable, disable, or make no change to the authentication method.
Method Select the type of authentication method:
• rsa-sig
• rsa-encr
• pre-share
Group Action Select to enable, disable, or make no change to the Diffie-Hellman group
identifier group.
Valu e Enter the Diffie-Hellman group identifier.
Value must be 1 or 2.
Lifetime Action Select to enable, disable, or make no change to the lifetime value.
Seconds
[60-86400]
Enter the lifetime value in seconds.
Value must be between 60—86400 seconds.