
C613-50186-01 Rev B
Command Reference for AR2050V
2694
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
CRYPTO
ISAKMP
KEY
crypto isakmp key
Overview
Use this command to configure a pre-shared authentication key.
Pre-shared key authentication uses optionally encrypted shared keys identified by
hostname, IPv4 or IPv6 address. Pre-shared keys are not viewable and stored
encrypted in the running-configuration.
You must configure this key whenever you specify pre-shared keys in an (Internet
Key Exchange) IKE policy and at both peers.
To use the
no
variant to remove a previously created pre-shared key.
Syntax
crypto isakmp key [8] <
key
> {hostname <
hostname
>|address
{<
ipv4-addr
>|<
ipv6-addr
>}}
no crypto isakmp key [8] <key> {hostname <
hostname
>|address
{<
ipv4-addr
>|<
ipv6-addr
>}
Default
ISAKMP keys do not exist.
Mode
Global Configuration
Examples
To configure a pre-shared authentication key for a destination host, use the
commands below:
awplus#
configure terminal
awplus(config)#
crypto isakmp key friend hostname
Parameter
Description
crypto
Security specific command.
isakmp
Internet Security Association Key Management Protocol provides a
common framework for key management implementations.
key
Pre-shared key.
<
key
>
Specify the pre-shared key. Us any combination of alphanumeric
characters up to 128 bytes.
8
Specifies that an encrypted key follows.
<
hostname
>
Destination hostname.
<
ipv4-addr
>
Destination IPv4 address. The IPv4 address uses the
format A.B.C.D.
<i
pv6-addr
>
Destination IPv6 address. The IPv6 address uses the
format X:X::X:X.