Dell PowerConnect W-7200 Series, Reference Manual

Page: 208 / 1538

208 | crypto dynamic-map Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
384-bit
random
Diffie
Hellman
ECP
modulus
group.
set security-association lifetime seconds <seconds>
Configures the
lifetime, in
seconds, for
the security
association
(SA). 300-86400 no limit
set transform-set
Name of the
transform set
for this
dynamic map.
You can
specify up to
four transform
sets. You
configure
transform sets
with the crypto
ipsec
transform-set
command. — default-
transform
version
Specify the
version of IKE
protocol the
controller uses
to set up a
security
association
(SA) in the
IPsec protocol
suite
l
v1:IKEv1
l
v2: IKEv2
— v1
Usage Guidelines
Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a
dynamic map, you can optionally associate that map with the default global map using the command
crypto map
global-map .
Example
The following command configures a dynamic map:
(host) (config)# crypto dynamic-map dmap1 100
set pfs group2
set security-association lifetime seconds 300