> # Configuring IPsec and IKE Manually

> This section describes how to manually configure IPsec and IKE.

> If you are not using the FCIP Wizard, see "Enabling IPsec Using FCIP Wizard" topic.

> IPsec provides secure data flows between participating peers. Multiple IPsec data flows can exist between two peers to secure different data flows, with each tunnel using a separate set of SAs.

> ## Prerequisites

> After you have completed IKE configuration, configure IPsec.

> ## Detailed Steps

> To configure IPsec in each participating IPsec peer, follow these steps:

> 1. Identify the peers for the traffic to which secure tunnels should be established.
> 2. Configure the transform set with the required protocols and algorithms.
> 3. Create the crypto map and apply access control lists (IPv4-ACLs), transform sets, peers, and lifetime values as applicable.
> 4. Apply the crypto map to the required interface.

> This section includes the following topics:

> - Using IPsec
> - Configuring an IKE Policy
> - Configuring the Keepalive Time for a Peer
> - Configuring the Initiator Version
> - Clearing IKE Tunnels or Domains
> - Refreshing SAs

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.