IPSec can be used to protect one or more data flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a host. IPSec is an IP security feature that provides robust authentication and encryption of IP packets. IPSec can be configured without IKE, but IKE enhances IPSec by providing additional features, flexibility, and ease of configuration for the IPSec standard. Gateway initiates the configuration mode with the client. Once the client responds, the IKE modifies the sender's identity, the message is processed, and the client receives a response.
Client initiates the configuration mode with the gateway.
The gateway responds with an IP address it has allocated for the client. Define the pool of IP addresses. Define which crypto maps should attempt to configure clients. Step Command Purpose 1 . To define a local address pool, use the existing ip local pool command.