| 15.5 |  | Using PDM to Create Site-to-Site VPNs |
| 15.5.3 |  | Configuring IKE |

| IKE-related screens are grouped under the IKE branch of the Categories tree. It is possible to view the configured ISAKMP policies by selecting Policies from the ISAKMP branch. Add, edit, or delete policies by clicking the buttons on the right side of the screen.

Clicking Add opens a window where an administrator can configure an IKE policy, including encryption algorithm, hash algorithm, DH group, SA lifetime, and authentication method. There is a separate section for pre-shared keys. If pre-share is selected as the authentication type, it is necessary to specify the key and identify the peer that will be sharing this key with the PIX Security Appliance. Selecting the Browse button brings up a screen from which a key and peer combination can be selected from a pre-configured list.