IPsec VPN Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
769
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
T
O
C
ONFIGURE
IP
SEC
C
RYPTO
M
AP
Crypto map entries created for IPsec pull together various parts used to set up
IPsec security associations that include:
•
Which traffic should be protected by IPsec (as defined by match-list earlier)
•
Where the IPsec-protected traffic should be sent (remote IPsec peer).
•
What kind of IPsec security to be applied to this traffic (as configured by the
transform-set)
•
Security associations established via IKE.
Note:
The crypto map name can have a maximum of 32 characters.
Force -
This option is used to modify a crypto map when it is applied to an interface.
E
XAMPLE
ALU(config)# crypto map exampleMap ipsec-ike examplePolicy
ALU(config-crypto-map-exampleMap)#
T
O
A
TTACH
M
ATCH
-
LIST
TO
A
C
RYPTO
M
AP
Note:
If you try to attach a match-list to a crypto map that already has one, it overrides the
existing match-list.
E
XAMPLE
ALU(config-crypto-map-exampleMap)# match matchlist1
ALU(config-crypto-map-exampleMap)# no match matchlist1
Command (in CM)
Description
crypto map
<
name>
ipsec-ike
<ike-
policy name>
}
[
force
]
This command creates a crypto
map, and attaches an IKE policy to
it.
Enter the IKE policy name as
‘
default
’ to use the default IKE
policy.
Command (in Crypto Map CM)
Description
match
<
match-list name>
This command attaches a match-list to
a crypto map.
no match
<
match-list name>
The ‘no’ command detaches the
specified match-list attached to a
crypto map.
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...