Show crypto isakmp policy Command

This command is executed from the privileged EXEC mode used to view the current Internet Security Association and Key Management Protocol (ISAKMP) (IKE) policy. The IKE policy determines the encryption algorithm, hash algorithm, Diffie-Hellman group, and ISAKMP SA lifetime for the IKE Phase 1 connection. Example 21-2 depicts the output from this command on the New York router. Notice that the configuration includes not only the configured parameters (AES-256, SHA-1, HD group 5, and 86,400 seconds), but it also includes a default ISAKMP policy. It is possible to create VPN connections using the default policy, but it is not recommended.

0 0

Post a comment