Table of Contents
Advertisement
Command Reference Guide
local-id
Use the local-id command to set the local ID for the Internet key exchange (IKE) policy. This setting
overrides the system local ID setting (set in the Global Configuration mode using the crypto ike local-id
address command). Use the no form of this command to remove a local ID. Variations of this command
include:
local-id address <ip address>
local-id asn1-dn <name>
local-id fqdn <name>
local-id user-fqdn <name>
Syntax Description
address <ip address>
asn1-dn <name>
fqdn <name>
user-fqdn <name>
Default Values
By default, the local ID is not defined.
Command History
Release 4.1
Functional Notes
The local ID for a particular IKE policy can be set in two ways. The first (default) method is done in the
Global Configuration mode:
(config)#crypto ike local-id address
This command, which by default is executed on startup, makes the local ID of an IKE policy equal to the
IPv4 address of the interface on which an IKE negotiation is occurring. This is particularly useful for
products that could have multiple public interfaces.
The second method is to use the IKE policy command:
(config)#crypto ike policy 1
(config-ike)#local-id [address | asn1-dn | fqdn | user-fqdn] <ip address or name>
60000CRG0-35E
Specifies a remote IP address. IP addresses should be expressed in dotted
decimal notation (for example, 10.10.10.1).
Specifies an abstract syntax notation distinguished name as the remote ID
(enter this value in Lightweight Directory Access Protocol (LDAP) format).
Specifies a fully qualified domain name (FQDN) (e.g., adtran.com) as the
remote ID.
Specifies a user FQDN or email address (e.g., user1@adtran.com) as the
remote ID.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
IKE Policy Command Set
3963
Advertisement
Table of Contents
