crypto-remote-vpn-client commands

crypto

This section documents the IKEV2 remote VPN client configuration settings. Use this command to define the server resources used to secure (authenticate) a remote VPN connection with a target peer.

Use the profile-config instance to configure remote VPN client settings. To navigate to the remote-vpn-client configuration instance, use the following commands:

<DEVICE>(config)#profile <DEVICE-TYPE> <PROFILE-NAME>
<DEVICE>(config-profile-<PROFILE-NAME>)#crypto remote-vpn-client
<DEVICE>(config-profile-<PROFILE-NAME>-crypto-ikev2-remote-vpn-client)#
Note

Note

To configure remote VPN client settings on a device, on the device‘s configuration mode, use the crypto > remote-vpn-client command. For example:
nx9500-6C8809(config-device-B4-C7-99-6C-88-09)#crypto remote-vpn-client

The following configuration enables a access point to adopt to a controller over the remote VPN link:

  • On a profile: nx9500-6C8809(config-profile-testNX9500)#controller host <HOST-IP> remote-vpn-client
  • On a device: nx9500-6C8809(config-device-B4-C7-99-6C-88-09)#controller host <HOST-IP> remote-vpn-client
    nx9500-6C8809(config)#profile ap8533 testAP8533
    nx9500-6C8809(config-profile-testAP8533)#
    
    nx9500-6C8809(config-profile-testAP8533)#crypto remote-vpn-client
    nx9500-6C8809(config-profile-testAP8533-crypto-ikev2-remote-vpn-client)#?
    Crypto IKEV2 Remote Vpn Client Config commands:
      dhcp-peer      Configure parameters for peers received via DHCP option
      no             Negate a command or set its defaults
      peer           Add a remote peer
      shutdown       Disable remote vpn client
      transform-set  Specify IPSec transform to use
    
      clrscr         Clears the display screen
      commit         Commit all changes made in this session
      do             Run commands from Exec mode
      end            End current mode and change to EXEC mode
      exit           End current mode and down to previous mode
      help           Description of the interactive help system
      revert         Revert changes
      service        Service Commands
      show           Show running system information
      write          Write running configuration to memory or terminal
    
    nx9500-6C8809(config-profile-testAP8533-crypto-ikev2-remote-vpn-client)#
    

The following table summarizes crypto remote VPN client configuration mode commands:

Command Description
dhcp-peer Configures DHCP peer‘s local ID and authentication settings
peer Adds a remote IKEv2 peer
shutdown Disables the remote VPN client
transform-set Associates an existing IPSec transform set with this remote VPN client
no Removes the remote VPN client settings