| 14.4 |  | Task 2 - Configure IKE Parameters |
| 14.4.3 |  | Step 3 - Configure the IKE pre-shared key |

| During configuration of IKE Phase 1 policy, an authentication method must be chosen. If pre-share is selected for this task, then a keystring must be manually configured. The command used to configure the IKE pre-shared key is as follows: pixfirewall(config)# isakmp key keystring address peer-address [netmask]

The keystring is any combination of alphanumeric characters up to 128 bytes. This pre-shared key must be identical at both peers. The peer-address and netmask should point to the IP address of the IPSec peer. A wildcard peer address and netmask of 0.0.0.0 0.0.0.0 may be configured to share the pre-shared key among many peers. However, it is strongly recommended that a unique key be used for each peer. The peer hostname may also be used for the pre-shared key.

| Lab Activity e-Lab Activity: Configure Pre-Shared Keys In this activity, the student will configure the IKE pre-shared key.