Configure Destination IP Address for IPsec Tunnel

About this task

Perform this procedure to configure the destination IP address for the IPsec tunnel on a specific IS-IS logical interface on the switch.

Note

Note

Product Notice: This procedure only applies to XA1400 Series switches.

Procedure

  1. Enter Logical IS-IS Interface Configuration mode:

    enable

    configure terminal

    logical-intf isis <1–255>

  2. Configure destination IP address for IPsec tunnel:

    ipsec tunnel-dest-ip {A.B.C.D}

Example

Configuring destination IP address for IPsec tunnel.
Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#logical-intf isis 1 
Switch:1(config-isis-1-192.0.2.25)ipsec tunnel-dest-ip 192.0.2.30

Variable Definitions

The following table defines the variable for ipsec tunnel-dest-ip command.

Variable Value
{A.B.C.D}

Specifies destination IP address for the IPsec tunnel on a specific IS-IS logical interface.

Note:

When you configure the destination IP address for the IPsec tunnel, IKE protocol uses UDP port 500. However, if IPsec NAT-T is detected, IKE protocol uses UDP port 4500 instead.
9037602-00 Rev AB