Crypto - Motorola RFS6000 Reference Manual

5-22 Motorola RF Switch CLI Reference Guide

5.1.8 crypto


Global Configuration Commands
Use crypto to define system level local ID for ISAKMP negotiation and to enter the ISAKMP
Policy, ISAKMP Client or ISAKMP Peer command set.
Supported in the following platforms:
• RFS7000
• RFS6000
• RFS4000
Syntax
crypto [ipsec|isakmp|key|map|pki]
crypto ipsec [security-association|transform-set]
crypto ipsec security-association lifetime
[kilobyte|seconds] <lifetime>
crypto ipsec transform-set <transform-set-tag>
[ah-md5-hmac|ah-sha-hmac|esp-3des|esp-aes|esp-aes-192|
esp-aes-256|esp-des|esp-md5-hmac|esp-sha-hmac]
NOTE:
crypto isakmp(policy)Priority
config-crypto-isakmp
Crypto-isakmp Instance on page
crypto isakmp client configuration group default
moves you to the
config-crypto-group
see Crypto-group Instance on page
crypto isakmp peer IP Address
config-crypto-peer
Instance on page 8-1.
crypto ipsec transformset <tag> <value>
Use the crypto ipsec transform-set command to
crypto-ipsec.
define the transform configuration for securing data (for example, esp-
3des, esp-sha-hmac, etc.). The transform-set is assigned to a crypto
map using the map's set transform-set command. For more details, see
Crypto-ipsec Instance on page
crypto pki trustpoint
instance. For more details, see
moves to the
instance. For more information, see
6-1.
instance. For more details,
7-1.
moves to the
instance. For more details, see
9-1.
mode leads to the
Crypto-trustpoint Instance on page
Crypto-peer
leads you to
config-trustpoint
11-1.