Corporate Headquarters

Step 2
hq-sanjose(config)#
cry isakmp keepalive 12 2
Optional step: Specify the time interval of IKE keepalive 
packets (default is 10 seconds), and the retry interval when 
the keepalive packet failed. This example configures the 
keepalive interval for 12 seconds and the retry interval for 2 
seconds.
Step 3
hq-sanjose(config-isakmp)#
encryption des
Specify the encryption algorithm—56-bit Data Encryption 
Standard (DES [
des
]) or 168-bit Triple DES (
3des
). This 
example configures the DES algorithm, which is the default.
Step 4
hq-sanjose(config-isakmp)#
hash sha
Specify the hash algorithm—Message Digest 5 (MD5 
[
md5
]) or Secure Hash Algorithm (SHA [
sha
]). This 
example configures SHA, which is the default.
Step 5
hq-sanjose(config-isakmp)#
authentication 
pre-share
Specify the authentication method—pre-shared keys 
(
pre-share
), RSA
1
encrypted nonces (
rsa-encr
), or RSA 
signatures (
rsa-slg
). This example configures pre-shared 
keys. The default is RSA signatures.
1.
RSA = Rivest, Shamir, and Adelman.
Step 6
hq-sanjose(config-isakmp)#
group 1
Specify the Diffie-Hellman group identifier—768-bit 
Diffie-Hellman (
1
) or 1024-bit Diffie-Hellman (
2
). This 
example configures 768-bit Diffie-Hellman, which is the 
default.
Step 7
hq-sanjose(config-isakmp)#
lifetime 86400
Specify the security association’s lifetime—in seconds. This 
example configures 86400 seconds (one day).
Step 8
hq-sanjose(config-isakmp)#
exit
hq-sanjose(config)#
Exit back to global configuration mode.

---