Dell PowerConnect W-7200 Series Reference Manual page 436

masterip
masterip <ipaddr>
ipsec <key> [interface uplink|{vlan <id>}] [fqdn <fqdn>]
ipsec-custom-cert master-mac1 <mac1> [master-mac2 <mac2>] ca-cert <ca> server-cert <cert>
[interface uplink|{vlan <id>}] [fqdn <fqdn>] [suite-b gcm-128|gcm-256]
ipsec-factory-cert master-mac1 <mac1> [master-mac2 <mac2>] [interface uplink|{vlan <id>}]
[fqdn <fqdn>]
Description
This command configures the IP address and preshared key or certificate for the master controller on a local
controller.
Syntax
Parameter
<ipaddr>
ipsec <key>
ipsec-custom-cert
master-mac1 <mac1>
master-mac2 <mac2>
ca-cert <ca>
server-cert <cert>
interface
uplink
vlan <id>
fqdn <fqdn>
suite-b
ipsec-factory-cert
436 | masterip
Description
IP address of the master controller.
To establish the master-local IPsec tunnel using IKEv1, enter a preshared key between 6-
64 characters.
Use a custom-installed certificate on the master controller to establish a master-local
IPsec tunnel using IKEv2.
The MAC address of the certificate on the Master.
(Optional) the MAC address of the certificate on the backup master controller.
User-defined name of a trusted CA certificate installed on the master controller. Use the
show crypto-local pki TrustedCA command to display the CA certificates that have been
imported into the controller.
User-defined name of a server certificate installed on the master controller. Use the
show crypto-local pki ServerCert command to display the server certificates that have
been imported into the controller.
Specify the uplink or VLAN interface on the master controller to initiate IKE.
Use the master controller's current active uplink to initiate IKE.
Specify a VLAN interface on the master controller to initiate IKE. If you do not specify a
VLAN, the controller IP will be used.
Identify a dynamically addressed local controller by entering the Fully Qualified Domain
Name (FQDN) of the controller.
If you configure your master and local controllers to use IKEv2 and custom-installed
certificates, you can optionally use Suite-B cryptographic algorithms for IPsec
encryption. Specify one of the following options:
gcm-128 Use 128-bit AES-GCM Suite-B encryption
l
gcm-256 Use 256-bit AES-GCM Suite-B encryption
l
Use the factory-installed certificate on the master controller to establish a master-local
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide