Cisco Cisco Packet Data Gateway (PDG)

Cisco

Contents ▀

IPSec Reference, StarOS Release 16 ▄

vii

show Commands ......................................................................................................................... 146

IKE Call Admission Control .................................................................................................................. 148

Remote Secrets ............................................................................................... 149

PSK Support for Remote Secrets ......................................................................................................... 150

Overview .......................................................................................................................................... 150

Implementation ................................................................................................................................. 150

Supported IKE ID Types .................................................................................................................. 150

Deployment Scenarios ..................................................................................................................... 151

CLI Commands ..................................................................................................................................... 152

Global Configuration Mode .............................................................................................................. 152

crypto remote-secret-list .............................................................................................................. 152

remote-id id-type .......................................................................................................................... 152

Context Configuration Commands ................................................................................................... 152

Enable remote secret list ............................................................................................................. 152

show Commands .............................................................................................................................. 153

show configuration ....................................................................................................................... 153

show crypto map .......................................................................................................................... 153

show crypto template ................................................................................................................... 153

IKEv2 RFC 5996 Compliance ......................................................................... 155

RFC 5996 Compliance ......................................................................................................................... 156

Overview .......................................................................................................................................... 156

TEMPORARY_FAILURE ............................................................................................................. 156

CHILD_SA_NOT_FOUND ........................................................................................................... 156

Exchange Collisions ..................................................................................................................... 156

Integrity with Combined Mode Ciphers ........................................................................................ 157

Negotiation Parameters in CHILDSA REKEY ............................................................................. 157

Certificates ................................................................................................................................... 157

Multiple Traffic Selectors .............................................................................................................. 157

CLI Commands ..................................................................................................................................... 158

Context Configuration Mode ............................................................................................................ 158

Enable Notification Payloads ....................................................................................................... 158

Add Hash and URL Encoding to Certificates ............................................................................... 158

Enable TSr Ranges ...................................................................................................................... 160

show commands .............................................................................................................................. 161