The following procedure describes IKE policy configuration on the Extreme Networks S- K- and 7100-Series devices.
Configuring an IKE Policy
| Step | task | Command(s) |
|---|---|---|
| 1 | Enter IKE policy configuration mode, from the global VRF router configuration mode, to create a new or modify an existing IKE policy. | crypto ike-policy policy-identifier |
| 2 | In IKE policy configuration mode, configure the authentication pre-shared key (PSK) for the IKE policy. | authentication psk pre-shared-key |
| 3 | In IKE policy configuration mode, optionally enable initial contact feature for the IKE policy. | initial-contact |
| 4 | In IKE policy configuration mode, configure the lifetime for the IKE policy. | lifetime time minutes |
| 5 | In IKE policy configuration mode, optionally enable passive mode for the IKE policy | passive |
| 6 | In IKE policy configuration mode, configure the SA peer for the IKE policy. | peer address |
| 7 | In IKE policy configuration mode, assign an IKE proposal to the IKE policy. | proposal proposal-identifier |
| 8 | In IKE policy configuration mode, configure the IKE version for the IKE policy. | version version |
Refer to the S-, K-, and 7100 Series CLI Reference Guide for more information about each command.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB