ADTRAN AOS Version R10.1.0 Command Reference Manual page 928

Command Reference Guide
crypto map
Use the crypto map command to define crypto map names and numbers and to enter the associated mode
(either Crypto Map Internet key exchange (IKE) or Crypto Map Manual). Use the no form of this
command to disable this feature. Variations of this command include the following:
crypto map <name> <index> ipsec-ike
crypto map <name> <index> ipsec-manual
For virtual private network (VPN) configuration example scripts, refer to the VPN
configuration guide located on the AOS Documentation CD provided with your unit.
Syntax Description
<name>
<index>
ipsec-ike
ipsec-manual
Default Values
No default values are necessary for this command.
Command History
Release 4.1
Functional Notes
Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto
map is associated with transform sets that contain specific security algorithms (refer to
transform-set <name> <parameters> on page
Crypto map entries do not directly contain the selectors used to determine which data to secure. Instead,
the crypto map entry refers to an access control list (ACL). An ACL is assigned to the crypto map using the
match address command (refer to
If no transform set or access list is configured for a crypto map, the entry is incomplete and will have no
effect on the system.
When you apply a crypto map to an interface (using the crypto map command within the interface's
mode), you are applying all crypto maps with the given map name. This allows you to apply multiple crypto
maps if you have created maps that share the same name, but have different map index numbers.
60000CRG0-35E
Names the crypto map. You can assign the same name to multiple crypto
maps, as long as the map index numbers are unique.
Assigns a crypto map sequence number.
Specifies the crypto map IKE (refer to
page 3916). This supports IPSec entries that will use IKE to negotiate keys.
Specifies the crypto map manual (refer to
Set on page 3933). This supports manually configured IPSec entries.
Command was introduced.
927).
ike-policy <number> on page
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
Crypto Map IKE Command Set on
Crypto Map Manual Command
crypto ipsec
3920).
928