peer

crypto-map-ipsec-isakmp-instance

Configures the IKEv1 or IKEv2 peer for the auto site-to-site VPN tunnel or remote VPN client. The peer device can be specified either by its hostname or by its IP address. A maximum of three peers can be configured.

Supported on the following devices:

Access Points: AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

peer <1-3> [ikev1|ikev2] <IKEv1/IKEv2-PEER-NAME>

Parameters

peer <1-3> [ikev1|ikev2] <IKEv1/IKEv2-PEER-NAME>


peer <1-3>	Creates a new peer and configures the peer‘s priority level. Peer ‘1‘ is the primary peer, and peer ‘3‘ is redundant.
ikev1 <IKEv1-PEER-NAME>	Configures an IKEv1 peer <IKEv1-PEER-NAME> – Specify the IKEv1 peer‘s name.
ikev2<IKEv2-PEER-NAME>	Configures an IKEv2 peer <IKEv2-PEER-NAME> – Specify the IKEv2 peer‘s name.

Example

Site-to-site tunnel:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#peer 1 ikev2 ikev2Peer1

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#show context
 crypto map test 1 ipsec-isakmp
  peer 1 ikev2 ikev2Peer1
  local-endpoint-ip 192.168.13.10
  ip nat crypto
nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#

Remote VPN client:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#peer 1 ikev1 RemoteIKEv1Peer1

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#show context
 crypto map test 2 ipsec-isakmp dynamic
  peer 1 ikev1 RemoteIKEv1Peer1
  local-endpoint-ip 157.235.204.62
nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#