| 14.4 |  | Task 2 - Configure IKE Parameters |
| 14.4.1 |  | Step 1 - enable or disable IKE |

| After policies are determined and proper network functionality is verified, begin the PIX configuration by programming the IKE parameters gathered in the previous task. IKE phase one as implemented by ISAKMP creates security associations that allow for proper IPSec negotiation. This section presents the steps used to configure IKE parameters for IKE pre-shared keys.

The first step in configuring IKE is to enable or disable ISAKMP. ISAKMP is enabled by default but may be enabled with the isakmp enable interface-name interface-name command. Use the no form of the command to disable ISAKMP.

ISAKMP does not have to be enabled for individual interfaces, but is enabled globally for all interfaces at the PIX. The administrator may choose to block ISAKMP access on interfaces not used for IPSec.

| Lab Activity e-Lab Activity: Enable/Disable IKE In this activity, the student will demonstrate how to enable/disable IKE on the PIX Security Appliance.

| Media Activity Demonstration Activity: Enable or Disable IKE In this activity, students will learn how to configure IKE.