ADTRAN AOS Version R10.1.0 Command Reference Manual page 1604

Command Reference Guide
crypto map <name>
Use the crypto map command to associate crypto maps with the interface. Use the no form of this
command to remove a crypto map from an interface.
When you apply a map to an interface, you are applying all crypto maps with the given
map name. This allows you to apply multiple crypto maps if you have created maps that
share the same name, but have different map index numbers.
For virtual private network (VPN) configuration example scripts, refer to the VPN
configuration guide available on the AOS Documentation CD shipped with your product.
Syntax Description
<name>
Default Values
By default, no crypto maps are assigned to an interface.
Command History
Release 4.1
Release 5.1
Release A4.01
Functional Notes
When configuring a system to use both the stateful inspection firewall and Internet key exchange (IKE)
negotiation for VPN, keep the following notes in mind.
When defining the policy class and associated access control lists (ACLs) that describe the behavior of the
firewall, do not forget to include the traffic coming into the system over a VPN tunnel terminated by the
system. The firewall should be set up with respect to the unencrypted traffic that is destined to be sent or
received over the VPN tunnel. The following diagram represents typical AOS data-flow logic.
60000CRG0-35E
Specifies the crypto map name that you wish to assign to the interface.
Command was introduced.
Command was expanded to include the Ethernet subinterfaces.
Command was expanded to include the Metro Ethernet Forum (MEF)
Ethernet Interface.
Copyright © 2012 ADTRAN, Inc.
Ethernet Interface Command Set
1604