Configuring ISAKMP Identity
| When IPSec peers authenticate one another during IKE Phase 1 negotiations using a preshared key, the peers also use either an IP address or hostname to authenticate each other. You should set the router's identity to an IP address if you will use only one interface to establish a tunnel with the remote peer. However, if you want to use multiple interfaces to establish an IPSec tunnel, you should set the router's identity to its hostname. The command syntax to configure the router's identity is Router(config)# crypto isakmp identity {address hostname} For example, if you want to use the router's hostname along with the preshared key to perform authentication, use the following command: Router(config)# crypto isakmp identity hostname Later in this chapter when we discuss crypto maps, you will see how the crypto isakmp identity command is tied to the set peer command in crypto map configuration mode.
|
