4-2
Cisco 7401ASR Installation and Configuration Guide
OL-5419-01 B0
Chapter4 Configuring the VPN Acceleration Module
Configuration Tasks
Using the EXEC Command Interpreter
You modify the configuration of your router through the software command interpreter called the EXEC
(also called enable mode). You must enter the privileged level of the EXEC command interpreter with
the enable command before you can use the configure command to configure a new interface or change
the existing configuration of an interface. The system prompts you for a password if one has been set.
The system prompt for the privileged level ends with a pound sign (#) instead of an angle bracket (>).
At the console terminal, use the following procedure to enter the privileged level:
Step1 At the user-level EXEC prompt, enter the enable command. The EXEC prompts y ou for a
privileged-level password as follows:
Router> enable
Password:
Step2 Enter the password (the password is case sensitive). For security purposes, the password is not disp layed.
When you enter the correct password, the system displays the privileged-level system prompt (#):
Router#
This completes the procedure for entering the privileged level of the EXEC command interpreter.
Configuring IKE
If you do not specify a value for a parameter, the default value is assigned. For in forma tio n o n de fault
values, refer to the “IP Security and Encryption” chapter of the Security Command Reference
publication.
To configure a policy, use the following commands, starting in global configuration mode:
For detailed information on creating IKE policies, refer to the “Configuring Internet Key Exchange
Security Protocol” chapter in the Security Configuration Guide publication.
Command Purpose
Step1 crypto isakmp policy priority Identifies the policy to create, and enters config-isakmp
command mode.
Step2 encryption {des | 3des} Specifies the encryption algorithm.
Step3 group {1 | 2} Specifies the Diffie-Hellman group identifier.