Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual page 678

Configuring IPsec
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Figure 30-4
Host 1
To configure the auto-peer option, follow these steps:
Command
Step 1
switch# config terminal
switch(config)#
Step 2
switch(config)# crypto map
SampleMap 31
ips-hac1(config-crypto-map-ip)#
Step 3
switch(config-crypto-map-ip)# set peer
auto-peer
switch(config-crypto-map-ip)# no set
peer auto-peer
Cisco MDS 9000 Family Configuration Guide
30-20
iSCSI with End-to-End IPsec Using the Auto-Peer Option
Subnet X
Host 2
iPSEC
iPSEC
Router
iPSEC
Host 3
domain ipsec
Chapter 30 Configuring IPsec Network Security
iPSEC
Purpose
Enters configuration mode.
Place you in the crypto map configuration mode for
the entry named SampleMap with 31 as its sequence
number.
Directs the software to select (during the SA setup) the
destination peer IP address dynamically.
Deletes the auto-peer configuration.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
MDS A