IPsec (Internet Protocol Security)

[lagapidis (Lazarus Agapidis)]

Hello Thor

When you configure an ISAKMP policy, you assign it a policy number. If you have multiple policies, during negotiation, the device will attempt to use the ISAKMP policies in sequential order. If the parameters of the first policy fail to be negotiated with the remote peer, then the next policy will be attempted. Take a look at this post for more details:

Encrypted GRE Tunnel with IPSEC

Hello Thierno ISAKMP policies are not tied directly to the crypto map so the numbers don’t have to be the same. ISAKMP policies function as follows: Each configuration supports a maximum of 20 ISAKMP policies, each with a different set of values. Assign a unique priority to each policy you create. The lower the priority number, the higher the priority. When ISAKMP negotiations begin, the peer that initiates the negotiation sends all of its policies to the remote peer, and the remote peer tr…

I hope this has been helpful!

Laz