ADTRAN AOS Version R10.1.0 Command Reference Manual page 3927

Command Reference Guide
set peer
Use the set peer command to set the IP address or host name of the peer device. Use the no form of this
command to remove a peer device. Variations of this command include:
set peer hostname <hostname>
set peer <ip address>
Syntax Description
hostname <hostname>
<ip address>
Default Values
No default values are necessary for this command.
Command History
Release 4.1
Release 16.1
Functional Notes
If no peer IP address or host name is configured, the entry will only be used to respond to IPSec requests;
it cannot initiate the requests (since it doesn't know which IP address to which to send the packet). When a
peer IP address is configured, the crypto map entry can be used to both initiate and respond to security
associations (SAs). The peer address or host name is not checked when a tunnel is initiated from a remote
unit; this address only serves as the virtual private network (VPN) peer to which to initiate a tunnel.
The peer IP address is the public IP address of the device that will terminate the IPSec tunnel. If the peer
IP address is not static, or the peer's address cannot be attained through the domain naming system
(DNS) host name, the ADTRAN product cannot initiate the VPN tunnel. There are many Dynamic DNS
services that can serve DNS for hosts that are dynamically addressed. By setting no peer IP address, the
ADTRAN product can respond to an IPSec tunnel request.
Only one peer IP address or host name can be set.
When using DNS host names for peer IP addresses, the crypto map is not able to initiate a tunnel until the
DNS host name resolves. This DNS host name is checked every 10 minutes.
60000CRG0-35E
Specifies the host name of the peer device expressed in the format
<host.example.com> (for example, vpn.somecompany.com).
Specifies the IP address of the peer device. If this is not configured, it
implies responder only to any peer. IP addresses should be expressed in
dotted decimal notation (for example, 10.10.10.1).
Command was introduced.
Command was expanded to include the host name parameters.
Copyright © 2012 ADTRAN, Inc.
Crypto Map IKE Command Set
3927