Configuration Tasks

To set up public keys and peer public keys without obtaining a digital certificate, you use router commands to perform the following tasks:

Display the router's public key by using the show ipsec key mypubkey rsa command. You can use the output from this command to provide information to the remote peer about the public key configured on the router. The remote peer can then enter the router's public key on its own system.
Manually enter the public key for the remote peer with which you want to establish IKE SAs by using the ipsec key pubkey-chain rsa and key-string commands.
Display the remote peer's public key by using the show ipsec key pubkey-chain rsa command.

For instructions on setting up peer public keys without a digital certificate, see Configuring Peer Public Keys Without Digital Certificates .