modeconfig

crypto-map-ipsec-isakmp-instance

Configures the mode config method (pull or push) associated with the remote VPN client

Supported in the following platforms:

  • Access Points — AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

modeconfig [pull|push]

Parameters

modeconfig [pull|push]
modeconfig [pull|push] Configures the mode config method associated with a remote VPN client. The options are: pull and push.

The mode (pull or push) defines the method used to assign a virtual IP. This setting is relevant for IKEv1 only, since IKEv2 always uses the configuration payload in pull mode. The default setting is push.

Example

Remote VPN client:

rfs4000-229D58(config-device-00-23-68-22-9D-58-cryptomap-test#2)#modeconfig pull

rfs4000-229D58(config-device-00-23-68-22-9D-58-cryptomap-test#2)#show context
crypto map test 2 ipsec-isakmp dynamic
  modeconfig pull
rfs4000-229D58(config-device-00-23-68-22-9D-58-cryptomap-test#2)