The configurable Cisco IKE lifetime is from 60-86400 seconds. The Cisco default IKE lifetime is 86400 seconds (= 1440 minutes), and it can be modified by these commands: Since the IKE and IPsec default lifetimes differ between vendors, select Properties > Encryption to set the Checkpoint lifetimes to agree with the Cisco defaults. !- IPsec configuration crypto ipsec transform-set rtpset esp-des esp-sha-hmac !- Internet Key Exchange (IKE) configuration crypto isakmp policy 1Ĭrypto isakmp key ciscorules address 172.18.124.157 Logging rate-limit console 10 except errors Router Configuration Cisco 3600 Router Configuration Note: Use the Command Lookup Tool ( registered customers only) to find more information on the commands used in this document.

In this section, you are presented with the information to configure the features described in this document. Refer to Cisco Technical Tips Conventions for more information on document conventions. If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. The information in this document is based on these software and hardware versions:Ĭisco IOS® Software (C3640-JO3S56I-M), Release 12.1(5)T, RELEASE SOFTWARE (fc1) This sample configuration assumes that traffic from inside the router and inside the Checkpoint to the Internet (represented here by the 172.18.124.x networks) flows before you start the configuration. This document demonstrates how to form an IPsec tunnel with pre-shared keys to join two private networks: the 192.168.1.x private network inside the Cisco router and the 10.32.50.x private network inside the Checkpoint Firewall.

Checkpoint route based vpn