crypto isakmp key keystring address peer-address – configure preshared authentication key crypto isakmp policy priority – to define Internet Key exchange (IKE) policy

-hash-encryption-group-authentication-lifetime

show crypto ipsec sa – shows current connections and information regarding encrypted and decrypted packets.

show crypto isakmp sa – view all current IKE security association at a peer. clear crypto isakmp sa – clears the phase 1

clear crypto ipsec sa – clears the phase 2

debug crypto isakmp - Displays the ISAKMP negotiations of Phase 1.

Router 1

ERT_805# show run

Building configuration ...

description fault

service password-encryption service timestamps debug

!

hostname ERT_805

!

enable password 7 3EDRIxtqRWCA

!

username router password 7 65WeJR6evnrR3mP

crypto ipsec transform-set transform-1 esp-3des esp-md5-hmac

!

crypto map dynmap 1 ipsec-isakmp set transform-set transform-1 set peer 10.0.0.2

49