HP ProCurve 7102dl Reference Manual page 626

Secure router sros command line interface

Hide thumbs Also See for ProCurve 7102dl:

Table of Contents

SROS Command Line Interface Reference Guide

crypto map <mapname>

Use the crypto map command to associate crypto maps with the interface.

When you apply a map to an interface, you are applying all crypto maps with the given map

name. This allows you to apply multiple crypto maps if you have created maps which share

the same name but have different map index numbers.

For VPN configuration example scripts, refer to the VPN Configuration Guide located on

the ProCurve SROS Documentation CD provided with your unit.

Syntax Description

Default Values

By default, no crypto maps are assigned to an interface.

Functional Notes

When configuring a system to use both the stateful inspection firewall and IKE negotiation for VPN, keep

the following notes in mind.

When defining the policy-class and associated access-control lists (ACLs) that describe the behavior of the

firewall, do not forget to include the traffic coming into the system over a VPN tunnel terminated by the

system. The firewall should be set up with respect to the unencrypted traffic that is destined to be sent or

received over the VPN tunnel. The following diagram represents typical SROS data-flow logic.

Specifies the crypto map name that you wish to assign to the interface.

Ethernet Interface Configuration Command Set

Chapters

Table of Contents