Header

Sections

Syndication

Blogroll:

||||| ALL Cisco-Network ARTICLES |||||
CCIE Journey,
The CCIE Journey,

Home : CCSP-Cisco Certified Security Professional : Configuring IPSec Manually Is Not Recommended

Email to a friend email

email

Print version print

print

Configuring IPSec Manually Is Not Recommended

Sep 28,2009 by alperen

small font

medium font

large font

Configuring IPSec Manually Is Not Recommended

Cisco recommends using IKE to set up the SAs because it’s difficult to ensure the SA values match between peers and D-H is a more secure method for generating secret keys between peers. Other reasons not to configure IPSec manually include the following:

Manual keying doesn’t scale well.
The result can be insecure because of difficulty in creating secure keying material manually.
Manually established SAs never expire.
ACLs used for crypto map entries using ipsec-manual are restricted to a single permit statement. Any other entries are ignored.
cp10 c r

Related news

» Cisco IOS IPSec for Preshared Keys Questions and Answers
by alperen posted on Sep 29,2009
» Configuring IPSec Manually
by alperen posted on Sep 28,2009
» Step 3-2 Configure Global IPSec Security Association Lifetimes
by alperen posted on Sep 27,2009
» Step 3-4 Configure Crypto Maps
by alperen posted on Sep 27,2009
» Cisco IOS IPSec for Preshared Keys
by alperen posted on Sep 27,2009

Did you enjoy this article?

(total 0 votes)

comment

Comments (0 posted)

More Top News

CCSP-Cisco Certified Security Professional

Cisco SAFE Implementation

Preparation Documents

Skills Required for the Exam

Cisco SAFE Implementation Questions and Answers

Access Control Lists Cisco

Access List Basics

Standard Access Lists

Extended Access Lists

TCP Access Lists

UDP Access Lists

ICMP Access Lists

Named Access Lists

Signature and Alarm Management Review

Signature and Alarm Management Review Questions and Answers

Managing Alarms

Event Viewer Customization

Preference Settings

Sensor Installation

Connecting to Your Network Sensor Appliance

Sensor Bootstrap

Sensor Installation and Configuration Review

Sensor Installation and Configuration Questions and Answers

Signature and Alarm Management

CIDS Signatures

Signature Series

Signature Implementations

Signature Classes

Signature Types

Signature Severity

Most Popular

Privilege Levels

Managing the Router's ARP Cache

Configuring SIP on a Cisco Router

IDS Signatures Grouped by Software Release Version

Most Commented

Exploring the Navigation Bar

Site Qualification Test (SQT)

PDAs as Diagnostic Tools

Featured Author

admin