Dell PowerConnect W-7200 Series Reference Manual page 213

Parameter
<mask>
udpencap-behind-
natdevice
enable
disable
packet-dump
Usage Guidelines
Use this command to configure the IKE pre-shared key, set the EAP authentication method for IKEv2 clients using
EAP user authentication, and enable source NAT if the IP addresses of clients need to be translated to access the
network.
Example
The following command configures an ISAKMP peer IP address and subnet mask. After configuring an ISAKMP
address and netmask, you will be prompted to enter the IKE preshared key.
(host)(config) #crypto isakmp address 10.3.14.21 netmask 255.255.255.0
Key:*******Re-Type Key:*******
Command History
Release
ArubaOS 3.0
ArubaOS 6.1
Command Information
Platforms
All platforms
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Description
A subnet mask, in dotted-decimal format
Configure NAT-T if controller is behind NAT device. (For Windows VPN Dialer only)
Enable Nat-T. This is the recommended setting if the controller is behind a NAT
device.
Disable Nat-T.
Issue this command in enable mode to troubleshoot an IPsec tunnel establishment by
looking at the packet exchanges between the controller and the remote AP or the other
IPsec peer. The packet dump output is saved to a file named ike.pcap.
NOTE: This is a testing feature only, and should not be enabled on a production
network. To disable this feature, use the command no crypto isakmp packet-dump.
Modification
Command introduced.
The eap-passthrough parameter was introduced.
Licensing
Base operating system
Command Mode
Config mode on master controllers
crypto isakmp | 213