proposal

Use this command to assign the specified IKE proposal to the IKE map.

Syntax

proposal proposal-identifier
no proposal proposal-identifier

Parameters

proposal-identifier Specifies the IKE proposal assigned to this IKE map. Valid value is up to 32 alpha-numeric characters plus special characters dash (-) and underscore (_).

Defaults

None.

Mode

IKE map configuration.

Usage

The proposal assigned to an IKE map is the main mode or key exchange proposal. Main mode is the IKE negotiation that establishes a secure channel, known as the Internet Security Association and Key Management Protocol (ISAKMP) SA, between two devices.

The IKE proposal does not have to exist in order to assign it to the IKE map. If the assigned proposal does not exist, the show ike map command will specify that the proposal does not exist.

An IKE proposal is configured by entering IKE proposal configuration mode using crypto ike-proposal.

Use the “no” option to remove the specified IKE proposal from the IKE map.

Example

This example shows how to assign the winRadius_main IKE proposal to the winRadius IKE map:

System(su-config)->crypto ike-map winRadius
System(su-crypto-map)->proposal winRadius_main
System(su-crypto-map)->