| 6.4 |  | Site-to-Site IPSec VPN Using Pre-shared Keys |
| 6.4.5 |  | Task 4 - test and verify IKE |

| Cisco IOS software contains a number of show, clear, and debug commands useful for testing and verifying IPSec and ISAKMP. These commands will be discussed in this section. Administrators can perform the following actions to test and verify that VPNs using Cisco IOS have been correctly configured:

- To display configured IKE policies, use the show crypto isakmp policy command.
- To display configured transform sets, use the show crypto IPSec transform set command.
- To display the current state of IPSec SAs, use the show crypto IPSec sa command.
- To view configured crypto maps, use the show crypto map command.
- To debug IKE and IPSec traffic through the Cisco IOS, use the debug crypto IPSec and debug crypto isakmp commands.

| Media Activity Demonstration Activity: Displaying IKE Policy In this activity, students will learn how to display IKE policy configurations.

| Lab Activity e-Lab Activity: IPSec Transforms Supported in the Cisco IOS Software In this activity, the student will use help command to display IPSec transform.

| Lab Activity e-Lab Activity: Configure CIsco IOS IPSec for Pre-Shared Keys In this lab activity, the student will configure a secure VPN gateway using IPSec between two Cisco routers to use pre-shared keys for authentication.

| Lab Activity Lab Exercise: Configure IOS IPSec using Pre-shared Keys In this lab, the student will learn the following objectives:

- Prepare to configure Virtual Private Network (VPN) Support
- Configure Internet Key Exchange (IKE) phase one
- Configure IKE parameters and verify IKE and IP Security (IPSec) configuration
- Configure IPSec parameters
- Verify and test IPSec configuration