The following procedure describes IKE map configuration on the Extreme Networks S- K- and 7100-Series devices.
Configuring an IKE Map
| Step | Task | Command(s) |
|---|---|---|
| 1 | Enter IKE map configuration mode, from the global VRF router configuration mode, to create a new or modify an existing IKE map. | crypto ike-map map-identifier |
| 2 | In IKE map configuration mode, configure a source address for the IKE map. | src address |
| 3 | In IKE map configuration mode, optionally configure a source port for the IKE map. The source port defaults to any port. | src-port port |
| 4 | In IKE map configuration mode, configure a destination (peer) address for the IKE map. | dst address |
| 5 | In IKE map configuration mode, optionally configure a destination port for the IKE map. The destination port defaults to any port. | dst-port port |
| 6 | In IKE map configuration mode, configure the encapsulation mode for the IKE map. | encapsulation {tunnel | transport} |
| 7 | In IKE map configuration mode, configure the lifetime in time or bandwidth for the IKE map. Both values can be configured using separate command entries. | lifetime {time minutes | bandwidth kilobytes} |
| 8 | In IKE map configuration mode, assign the specified IKE policy to the IKE map. | policy policy-identifier |
| 9 | In IKE map configuration mode, assign the specified main mode key exchange IKE proposal to the IKE map. | proposal proposal-identifier |
| 10 | In IKE map configuration mode, configure the IKE map with the UDP transmission protocol. | protocol udp |
| 11 | In IKE map configuration mode, request that encryption be used by the SA and to not used it if encryption is not supported by the peer. Defaults to encryption required. | request |
Refer to the S-, K-, and 7100 Series CLI Reference Guide for more information about each command.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB