ADTRAN AOS Version R10.1.0 Command Reference Manual page 987

Command Reference Guide
ip crypto
Use the ip crypto command to enable AOS virtual private network (VPN) functionality and allow crypto
maps to be added to the interfaces. Use the no form of this command to disable the VPN functionality.
Variations of this command include:
ip crypto
ip crypto fast-failover
Disabling the AOS security features (using the no ip crypto command) does not affect VPN
configuration settings (with the exception of the removal of all crypto maps from the
interfaces). All other configuration parameters will remain intact, and VPN functionality
will be disabled.
For VPN configuration example scripts, refer to the VPN configuration guide located on the
AOS Documentation CD provided with your unit.
Syntax Description
fast-failover
Default Values
By default, all AOS VPN functionality is disabled.
Command History
Release 4.1
Release 11.2
Functional Notes
VPN-related settings will not go into effect until you enable VPN functionality using the ip crypto
command. AOS allows you to perform all VPN-related configuration prior to enabling ip crypto, with the
exception of assigning a crypto map to an interface. The no ip crypto command removes all crypto maps
from the interfaces. Enabling ip crypto enables the IKE server on User Datagram Protocol (UDP) Port
500. The no form of this command disables the IKE server on UDP Port 500.
Usage Examples
The following example enables VPN functionality:
(config)#ip crypto
60000CRG0-35E
Optional. This setting is used when the same crypto map is applied to two
different egress interfaces. It allows the quick deletion of Internet key
exchange (IKE) and IPSec SAs when the default route policy class
changes.
Command was introduced.
Command was expanded to include the fast-failover feature.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
987