Step 4-1 Display the Configured IKE Policies

Sep 27,2009 by alperen

Step 4-1 Display the Configured IKE Policies

Use the show crypto isakmp policy command to view the parameters for each IKE policy, as the following example shows. Multiple policies are listed in priority order with the highest priority (first compared) listed first. The IKE default settings are shown at the end.

Rtr1#show crypto isakmp policy
Protection suite of priority 100
        encryption algorithm:   3DES - Triple DES (168 bit keys).
        hash algorithm:         Secure Hash Standard
        authentication method:  Pre-Shared Key
        Diffie-Hellman group:   #2 (1024 bit)
        lifetime:               43200 seconds, no volume limit
Protection suite of priority 200
        encryption algorithm:   DES - Data Encryption Standard (56 bit keys).
        hash algorithm:         Secure Hash Standard
        authentication method:  Pre-Shared Key
        Diffie-Hellman group:   #2 (1024 bit)
        lifetime:               43200 seconds, no volume limit
Protection suite of priority 300
        encryption algorithm:   DES - Data Encryption Standard (56 bit keys).
        hash algorithm:         Message Digest 5
        authentication method:  Pre-Shared Key
        Diffie-Hellman group:   #1 (768 bit)
        lifetime:               86400 seconds, no volume limit
Default protection suite
        encryption algorithm:   DES - Data Encryption Standard (56 bit keys).
        hash algorithm:         Secure Hash Standard
        authentication method:  Rivest-Shamir-Adleman Signature
        Diffie-Hellman group:   #1 (768 bit)
        lifetime:               86400 seconds, no volume limit
Rtr1#