Cisco MDS 9000 Series Configuration Manual page 213

Configuring IPSec Network Security
Figure 15: iSCSI with End-to-End IPsec Using the auto-peer Option
Configuring the AutoPeer Option
To configure the auto-peer option, follow these steps:
Procedure
Step 1 switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# crypto map domain ipsec SampleMap 31
ips-hac1(config-crypto-map-ip)#
Places you in the crypto map configuration mode for the entry named SampleMap with 31 as its sequence
number.
Step 3 switch(config-crypto-map-ip)# set peer auto-peer
Directs the software to select (during the SA setup) the destination peer IP address dynamically.
Step 4
switch(config-crypto-map-ip)# no set peer auto-peer
(Optional) Deletes the auto-peer configuration.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Configuring the AutoPeer Option
195