Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Is possible to encrypt the key of vpn

When i show run , I can saw that my setting vpn key as clear-text(crypto isakmp key cisco address x.x.x.x)on cisco 2800 serires , I want to know any command can change the key as encrypt?

I know PIX firewall can be change the key automatic to encrypt (isakmp key ******** address x.x.x.x) , all of another cisco router can do same as pix

1 REPLY
Cisco Employee

Re: Is possible to encrypt the key of vpn

Emily,

Please refer the below URL for the ISAKMP key encryption

http://www.cisco.com/en/US/customer/tech/tk583/tk372/technologies_configurat

ion_example09186a00801f2336.shtml

Basically you have to enter two commands

key config-key password-encryption [master key]

password encryption aes

The master key is not stored in the router configuration and cannot be

seen or obtained in any way while connected to the router. After these

commands, the password will be encrypted. Please note, that you don't

have to enter the password with the option "6", but with "0".

So if you configure a pre-shared key, you may enter the following:

crypto isakmp key 0 apple address 1.1.1.1

and the show running configuration line would look like

crypto isakmp key xxx address 1.x.x.1

The option "6" says, it will be the encrypted password afterwards, not to encrypt the password.

I hope it helps. Please refer the below URL for additional details

http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5207/products_fea

ture_guide09186a00801a7a7a.html

Regards,

Arul

** Please rate all helpful posts **

124
Views
0
Helpful
1
Replies
CreatePlease to create content