Identity; Chapter 11 I Command - Cisco MDS 9000 series Command Reference Manual

identity

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
identity
To configure the identity for the IKE protocol, use the identity command in IKE configuration submode.
To delete the identity, use the no form of the command.
Syntax Description
address
hostname
Defaults None.
Command Modes IKE configuration submode.
Command History Release
3.0(1)
Usage Guidelines
To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Before configuring a certificate for the switch, configure the host name and domain name, and set the
identity to be the host name. This allows the certificate to be used for authentication.
The host name is the fully qualified domain name (FQDN) of the switch. To use the switch FQDN for
Note
the IKE identity, you must first configure both the switch name and the domain name. The FQDN is
required for using RSA signatures for authentication.
Examples
The following example shows how to set the IKE identity to the IP address of the switch.
switch# config terminal
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# identity address 10.10.100.231
The following example shows how to delete the IKE identity.
switch(config-ike-ipsec)# no identity 10.10.100.231
The following example shows how to set the IKE identity to the host name.
switch(config-ike-ipsec)# identity hostname node1
The following example shows how to delete the IKE identity.
switch(config-ike-ipsec)# no identity hostname node1
Cisco MDS 9000 Family Command Reference
11-2
identity {address | hostname}
no identity {address | hostname}
Sets the IKE identity to be the IPv4 address of the switch.
Sets the IKE identity to be the host name of the switch.
Modification
This command was introduced.
Chapter 11 I Commands
OL-8413-07, Cisco MDS SAN-OS Release 3.x