mode

Configures the IPSec mode of operation for the IKEv1 policy. This option is not available for IKEv2 policy.

Supported on the following devices:

Access Points: AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP7602, AP7612, AP7622, AP7632, AP7662, AP8163, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

mode [aggresive|main]

Parameters

mode [aggresive|main]


mode [aggresive\|main]	Sets the mode of the tunnels aggressive – Initiates the aggressive mode main – Initiates the main mode If configuring the IKEv1 IPSec policy, define the IKE mode as either main or aggressive. In the aggressive mode, 3 messages are exchanged between the IPSec peers to setup the SA. On the other hand, in the main mode, 6 messages are exchanged. The default setting is main.

Example

nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#mode aggressive

nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#show context
 crypto ikev1 policy testpolicy
  dpd-keepalive 11
  dpd-retries 10
  lifetime 655
  isakmp-proposal default encryption aes-256 group 2 hash sha
  isakmp-proposal testpraposal encryption aes group 2 hash sha
  mode aggressive
nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#