Re: Difference between crypto map mapname 10 ipsec-manual &

From: Ivan (ivan@iip.net)
Date: Thu Jul 27 2006 - 07:40:54 ART


Second part this keyword means method key exchange to authenticate each other.

ISAKMP it is policy define security parameters during key exchange. This
define algoritm, encryption, hashing schemes during exchange key to set SA.

crypto map testcase 8 ipsec-manual
  encryption des
  group 1
  hash md5
  authenticate pre-share

Manual define keys manually for each direction (inbound, outbound) on each
side of tunnel.

crypto map testcase 8 ipsec-manual
 set peer 1.1.1.1
 set session-key inbound esp 1001 cipher 1234abcd1234abcd authenticator 01
 set session-key outbound esp 1000 cipher abcd1234abcd1234 authenticator 01

> Hi,
>
> What is the difference between crypto map mapname 10 ipsec-manual &
> crypto map mapname 10 ipsec-isakmp ?
>
> Thanks
> ********************************************DISCLAIMER*********************
>*********************** This email and any files transmitted with it are
> confidential and contain privileged or copyright information. If you are
> not the intended recipient you must not copy, distribute or use this email
> or the information contained in it for any purpose other than to notify us
> of the receipt thereof. If you have received this message in error, please
> notify the sender immediately, and delete this email from your system.
>
> Please note that e-mails are susceptible to change.The sender shall not be
> liable for the improper or incomplete transmission of the information
> contained in this communication,nor for any delay in its receipt or damage
> to your system.The sender does not guarantee that this material is free
> from viruses or any other defects although due care has been taken to
> minimise the risk.
> ***************************************************************************
>***********************
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

-- 
Ivan


This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:48 ART