Motorola WS5100 Series, Cli Reference Manual

Page: 265 / 492

crypto-map 10-7
upgrade.history 782 Aug 29 18:32
Please export these files or delete them for more space.
WS5100(config-crypto-map)#
10.1.8 set
Crypto Map Config Commands
Use this command to set the various set parameters of the peer device.
Syntax
set (localid|mode|peer|pfs|remote-type[ipsec-l2tp|xauth]|
security-association|session-key|transformset)
set localid(dn|hostname)
set security-association
(level(perhost) | lifetime(kilobytes|seconds) <value> )
set session-key (inbound|outbound)(ah|esp)
set session-key (inbound|outbound) ah <hexkey data>
set session-key (inbound|outbound) esp <SPI> cipher <hexdata key>
authenticator <hexkey data>
Parameters
local id Sets the local identity
• dn – Defines the distinguished name
• hostname – Sets the hostname
mode Sets the mode of the tunnels for this Crypto Map
• aggressive – Initiates aggressive mode
• main – Initiates main mode
peer Sets the IP address of the peer device. This can be set for
multiple remote peers. The remote peer can be either an IP
address or hostname
Note: In manual mode, only one remote peer can be added
for a crypto map
• IP address – Enter the IP address of the peer device. If
not configured, it implies responder only to any peer