Corporate Headquarters

Command
Purpose
Step 1
hq-sanjose(config)#
crypto isakmp key test67890
address 172.23.2.7
At the local peer
: Specify the shared key the headquarters 
router will use with the business partner router. This 
example configures the shared key test67890 to be used 
with the remote peer 172.23.2.7 (serial interface 1/0 on the 
business partner router).
Step 2
bus-ptnr(config)#
crypto isakmp identity address
At the remote peer
: Specify the ISAKMP identity 
(
address o
r 
hostname
) the business partner router will use 
when communicating with the headquarters router during 
IKE negotiations. (This task was already completed on the 
headquarters router when policy 1 was configured in the 
“Configuring IKE Policies” section on page 3-15
.) This 
example specifies the 
address
keyword, which uses IP 
address 172.23.2.7 (serial interface 1/0 of the business 
partner router) as the identity for the business partner 
router.
Step 3
bus-ptnr(config)#
crypto isakmp key test67890 
address 172.17.2.4
At the remote peer
: Specify the shared key to be used 
with the local peer. This is the same key you just specified 
at the local peer. This example configures the shared key 
test67890 to be used with the local peer 172.16.2.2 (serial 
interface 2/0 on the headquarters router).

---

3-22
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 3—Configuring Encryption and IPSec
Configuring IPSec and IPSec Tunnel Mode
After you have configured a different shared key, configure IPSec at each participating IPSec peer. This 
section contains basic steps to configure IPSec and includes the following tasks: