Cisco 7100 Series Especificaciones descargar pdf (Pagina 44)

Step 3—Configuring Encryption

Cisco 7100 Series VPN Configuration Guide

3-14

Creating Policies

To create an IKE policy, complete the followingsteps starting in global conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# crypto isakmp policy 1

Enter conﬁg-isakmp command mode and identify

the policy to create. (Each policy is uniquely

identiﬁed by thepriority numberyou assign.) This

example conﬁgures policy 1.

hq-sanjose(config-isakmp)# encryption des

Specify the encryption algorithm—56-bit Data

Encryption Standard (DES [des]) or 168-bit

Triple DES (3des). This example conﬁgures the

DES algorithm, which is the default.

hq-sanjose(config-isakmp)# hash sha

Specify the hash algorithm—Message Digest 5

(MD5 [md5]) or Secure Hash Algorithm (SHA

[sha]). This example conﬁgures SHA, which is

the default.

hq-sanjose(config-isakmp)# authentication

pre-share

Specify the authentication method—preshared

keys (pre-share), RSA

encrypted nonces

(rsa-encr), or RSA signatures (rsa-slg). This

example conﬁgures preshared keys. The default is

RSA signatures.

1 RSA = Rivest, Shamir, and Adelman.

hq-sanjose(config-isakmp)# group 1

Specify the Difﬁe-Hellman group

identiﬁer—768-bit Difﬁe-Hellman (1) or 1024-bit

Difﬁe-Hellman (2). This example conﬁgures

768-bit Difﬁe-Hellman, which is the default.

hq-sanjose(config-isakmp)# lifetime 86400

Specify the security association’s lifetime—in

seconds. This example conﬁgures 86400 seconds

(one day).

hq-sanjose(config-isakmp)# exit

hq-sanjose(config)#

Exit back to global conﬁguration mode.

1 2 ... 39 40 41 42 43 44 45 46 47 48 49 ... 111 112

Sin comentarios

Cisco 7100 Series Especificaciones Pagina 44