10.1.8 set
Crypto Map Config Commands
Configures set parameters for the peer device
Supported in the Following Platforms:
• WS5100
• RFS7000
• RFS6000
Syntax
set (localid|mode|peer|pfs|remote-type[ipsec-l2tp|xauth]|
security-association|session-key|transformset)
set localid(dn|hostname)
set security-association
(level(perhost)|lifetime(kilobytes|seconds)<value>)
set session-key (inbound|outbound)(ah|esp)
set session-key (inbound|outbound) ah <hexkey data>
set session-key (inbound|outbound) esp <SPI> cipher <hexdata key>
authenticator <hexkey data>
Parameters
local id
mode
Sets the local identity
• dn – Defines the distinguished name
• hostname – Sets the hostname
Sets the mode of the tunnels for this Crypto Map
• aggressive – Initiates aggressive mode
• main – Initiates main mode
Crypto-map Instance
10-11