crypto-remote-vpn-client commands

crypto

This section documents the IKEV2 remote VPN client configuration settings. Use this command to define the server resources used to secure (authenticate) a remote VPN connection with a target peer.

Use the profile-config instance to configure remote VPN client settings. To navigate to the remote-vpn-client configuration instance, use the following commands:

<DEVICE>(config)#profile <DEVICE-TYPE> <PROFILE-NAME>
<DEVICE>(config-profile-<PROFILE-NAME>)#crypto remote-vpn-client
<DEVICE>(config-profile-<PROFILE-NAME>-crypto-ikev2-remote-vpn-client)#

Note

To configure remote VPN client settings on a device, on the device‘s configuration mode, use the

 crypto > remote-vpn-client

command. For example:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09)#crypto remote-vpn-client

The following configuration enables a access point to adopt to a controller over the remote VPN link:

On a profile:nx9500-6C8809(config-profile-testNX9500)#controller host <HOST-IP> remote-vpn-client

On a device:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09)#controller host <HOST-IP>
                     remote-vpn-client

nx9500-6C8809(config)#profile ap8533 testAP8533
nx9500-6C8809(config-profile-testAP8533)#

nx9500-6C8809(config-profile-testAP8533)#crypto remote-vpn-client
nx9500-6C8809(config-profile-testAP8533-crypto-ikev2-remote-vpn-client)#?
Crypto IKEV2 Remote Vpn Client Config commands:
  dhcp-peer      Configure parameters for peers received via DHCP option
  no             Negate a command or set its defaults
  peer           Add a remote peer
  shutdown       Disable remote vpn client
  transform-set  Specify IPSec transform to use

  clrscr         Clears the display screen
  commit         Commit all changes made in this session
  do             Run commands from Exec mode
  end            End current mode and change to EXEC mode
  exit           End current mode and down to previous mode
  help           Description of the interactive help system
  revert         Revert changes
  service        Service Commands
  show           Show running system information
  write          Write running configuration to memory or terminal

nx9500-6C8809(config-profile-testAP8533-crypto-ikev2-remote-vpn-client)#

The following table summarizes crypto remote VPN client configuration mode commands:


Command	Description
dhcp-peer	Configures DHCP peer‘s local ID and authentication settings
peer	Adds a remote IKEv2 peer
shutdown	Disables the remote VPN client
transform-set	Associates an existing IPSec transform set with this remote VPN client
no	Removes the remote VPN client settings