index_183
UNCLASSIFIED
Advanced Security Services
Version 1.0g
UNCLASSIFIED
183
A quick check to ensure that it is working is to ping the router from the Windows
2000 host. The first attempt should fail and report "Negotiating IP Security". Ping a
second time, and the router and the Windows 2000 host should have completed their
key exchange and the ping should succeed. A network sniffer can be used to verify
that communcations between the router and host are encrypted. On the router, use
the command show crypto ipsec security-association to confirm that
IPSec is being used.