Cisco Systems C819GUK9, C819HG4GVK9 manual Command or Action Purpose

Chapter 9 Configuring Security Features

Configuring VPN

DETAILED STEPS

	Command or Action	Purpose
Step 1
	crypto isakmp policy priority	Creates an IKE policy that is used during IKE
	Example:	negotiation. The priority is a number from 1 to
		10000, with 1 being the highest.
	Router(config)# crypto isakmp policy 1	Also enters the Internet Security Association Key
	Router(config-isakmp)#
		and Management Protocol (ISAKMP) policy
		configuration mode.
Step 2
	encryption {des 3des aes aes 192	Specifies the encryption algorithm used in the IKE
	aes 256}	policy.
	Example:	The example specifies 168-bit data encryption
		standard (DES).
	Router(config-isakmp)# encryption 3des
	Router(config-isakmp)#
Step 3
	hash {md5 sha}	Specifies the hash algorithm used in the IKE
	Example:	policy.
		The example specifies the Message Digest 5
	Router(config-isakmp)# hash md5
		(MD5) algorithm. The default is Secure Hash
	Router(config-isakmp)#
		standard (SHA-1).
Step 4
	authentication {rsa-sig rsa-encr	Specifies the authentication method used in the
	pre-share}	IKE policy.
	Example:	The example specifies a pre-shared key.
	Router(config-isakmp)# authentication
	pre-share
	Router(config-isakmp)#
Step 5
	group {1 2 5}	Specifies the Diffie-Hellman group to be used in
	Example:	an IKE policy.
	Router(config-isakmp)# group 2
	Router(config-isakmp)#
Step 6
	lifetime seconds	Specifies the lifetime, from 60 to 86400 seconds,
	Example:	for an IKE security association (SA).
	Router(config-isakmp)# lifetime 480
	Router(config-isakmp)#
Step 7
	exit	Exits IKE policy configuration mode and enters
	Example:	global configuration mode.
	Router(config-isakmp)# exit
	Router(config)#

Cisco 819 Series Integrated Services Routers Software Configuration Guide

9-8 OL-23590-02