Cisco Cisco IOS Software Releases 12.2 MC White Paper

access-list 100 remark IPSec Rule

access-list 100 permit ip any 192.168.4.0 0.0.0.255

!

end

This section provides the following configuration tasks and examples:

To view information about your IKE configurations, use show crypto isakmp policy EXEC command. 
The following is sample output from that command:

Router# show crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp key cisco address 192.168.3.1

If a user enters an IKE encryption method that the hardware does not support, a warning message will 
be displayed in the show crypto isakmp policy output.

The following sample output from the show crypto isakmp policy command displays a warning 
message after a user tries to configure an IKE encryption method that the hardware does not support: 

Protection suite of priority 1

        encryption algorithm:  AES - Advanced Encryption Standard (256 bit keys).

WARNING:encryption hardware does not support the configured

encryption method for ISAKMP policy 1

        hash algorithm:        Secure Hash Standard

        authentication method: Pre-Shared Key

        Diffie-Hellman group:  #1 (768 bit)

        lifetime:              3600 seconds, no volume limit