Crypto Map - HP ProCurve 7102dl Reference Manual

SROS Command Line Interface Reference Guide

crypto map

Use the crypto map command to define crypto map names and numbers and to enter the associated (either
Crypto Map IKE or Crypto Map Manual).
Variations of this command include the following:
crypto map <mapname> <mapindex> ipsec-ike
crypto map <mapname> <mapindex> ipsec-manual
Note
For VPN configuration example scripts, refer to the technical support note VPN
Configuration Guide located on the ProCurve SROS Documentation CD provided with
your unit.
Syntax Description
<mapname>
<mapindex>
ipsec-ike
ipsec-manual
Default Values
There are no default settings for this command.
Functional Notes
Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto
map is associated with transform sets which contain specific security algorithms (see
transform-set <setname> <parameters>
Crypto map entries do not directly contain the selectors used to determine which data to secure. Instead,
the crypto map entry refers to an access control list. An access control list is assigned to the crypto map
using the match address command (see
If no transform-set or access-list is configured for a crypto map, the entry is incomplete and will have no
effect on the system.
When you apply a crypto map to an interface (using the crypto map command within the interface's), you
are applying all crypto maps with the given map name. This allows you to apply multiple crypto maps if you
have created maps which share the same name but have different map index numbers.
5991-2114
Names the crypto map. You can assign the same name to multiple crypto maps,
as long as the map index numbers are unique.
Assigns a crypto map sequence number.
Specifies the Crypto Map IKE (see
This supports IPSec entries that will use IKE to negotiate keys.
Specifies the Crypto Map Manual (see
1227). This supports manually configured IPSec entries.
on page 350).
ike-policy <policy number>
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Global Configuration Mode Command Set
Crypto Map IKE Command Set
Crypto Map IKE Command Set
on page 1231).
on page 1227).
on page
crypto ipsec
351