remoteid

crypto-ikev1/ikev2-peer commands

Configures a IKEv1/IKEV2 peer‘s remote identity. This remote identifier is used with this peer configuration for an IKE exchange with the target VPN IPSec peer.

Supported on the following devices:

Access Points: AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

remoteid [address <IP>|dn <WORD>|email <WORD>|fqdn <WORD>|string <WORD>]

Parameters

remoteid [address <IP>|dn <WORD>|email <WORD>|fqdn <WORD>|string <WORD>


address <IP>	Configures the remote IKEv1/IKEV2 peer‘s IP address. The IP address is used as the peer‘s remote identity.
dn <WORD>	Configures the remote peer‘s distinguished name. For example, "C=us ST=<state> L=<location> O=<organization> OU=<org unit>". The maximum length is 128 characters.
email <WORD>	Configures the remote peer‘s e-mail address. The maximum length is 128 characters.
fqdn <WORD>	Configures a peer‘s FQDN. The maximum length is 128 characters.
string <WORD>	Configures a peer‘s identity string. The maximum length is 128 characters.

Example

nx9500-6C8809(config-profile-default-ap8533-ikev1-peer-peer1)#remoteid dn SanJose

nx9500-6C8809(config-profile-default-ap8533-ikev1-peer-peer1)#show context
 crypto ikev1 peer peer1
  ip address 172.16.10.12
  remoteid dn SanJose
  localid email bob@examplecompany.com
nx9500-6C8809(config-profile-default-ap8533-ikev1-peer-peer1)#

nx9500-6C8809(config-profile-default-ap8533-ikev1-peer-peer1)#remoteid address 157.235.209.63

nx9500-6C8809(config-profile-default-ap8533-ikev2-peer-peer1)#show context
 crypto ikev2 peer peer1
  remoteid address 157.235.209.63
nx9500-6C8809(config-profile-default-ap8533-ikev2-peer-peer1)#