HP ProCurve 7102dl Reference Manual page 350

SROS Command Line Interface Reference Guide
crypto ike remote-id
Use the crypto ike remote-id command to specify the remote ID and to associate a pre-shared key with
the remote ID.
Note For VPN configuration example scripts, refer to the technical support note VPN
Configuration Guide located on the ProCurve SROS Documentation CD provided with
your unit.
Syntax Description
address <IPv4 address>
any
asn1-dn <name>
crypto map
fqdn <fqdn>
ike policy
user-fqdn <fqdn>
preshared-key <keyname>
no-mode-config
no-xauth
nat-t [v1 l v2] [allow l force I disable] Optional keyword that denotes whether peers matching this
Default Values
There are no default settings for this command.
Functional Notes
The fqdn and user-fqdn <WORD> line can include wildcard characters. The wildcard characters are "*"
for a 0 or more character match and "?" for a single character match. Currently, the "?" cannot be set up
using the CLI, but it can be transferred to the unit via the startup-config.
Example for user-fqdn:
john*@domain.com
will match:
johndoe@domain.com
johnjohn@myemail.com
5991-2114
Specifies a remote ID of IPv4 type.
Wildcard that allows any remote ID (type and value).
Specifies an Abstract Syntax Notation Distinguished Name as the
remote ID (enter this value in LDAP format).
Optional. Specifies the crypto map this remote ID corresponds to.
Specifies a fully qualified domain name (e.g., procurve.com) as
the remote ID.
Optional. Specifies the IKE policy this remote ID corresponds to.
Specifies a user fully qualified domain name or email address as
the remote ID.
Associates a pre-shared key with this remote ID.
Optional keyword used to specify that the peer matching this
remote ID should not use mode config.
Optional keyword used to specify that the peer matching this
remote ID should not use xauth.
remote ID should allow, disable, or force NAT traversal versions 1
and 2.
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Global Configuration Mode Command Set
348